CS459/559 - Network Security - Chapter 20 - Identifying and Preventing Common Attacks

1. Types of Attacks
   • Brute Force Attacks
     • Definition
     • 40-bit encryption ~ an hour; 56-bit encryption ~ 65,000 times more difficult; 128-bit encryption ~ 4.7 trillion billion times more
     • Brute Force of MD5
   • Dictionary Attacks
   • Denial of Service Attacks
     • NATO, etc.
     • UDP DoS code
   • SYN Attacks
   • IP Spoofing Attacks
     • Kevin Mitnick's alleged attack on Tsutomu Shimomura's Computers
     • How Mitnick hacked Tsutomu Shimomura with an IP sequence attack
   • Web Spoofing Attacks
     • Web Spoofing: An Internet Con Game
     • Web Spoofing - How To Protect From Being Attacked
     • Web Spoofing: An Internet Con Game
   • Social Engineering
     • "Social Engineering" just a new twist on an old con game
     • Cracking a Social Engineer
     • SOCIAL ENGINEERING FAQ!
   • Security Holes
   • Physical Security Holes
   • Software Security Holes
   • Poor Security Plan:

     >From: Gene Spafford 
     >The fourth kind of security problem is one of perception and
     >understanding.  Perfect software, protected hardware, and compatible
     >components don't work unless you have selected an appropriate security
     >policy and turned on the parts of your system that enforce it.  Having
     >the best password mechanism in the world is worthless if your users
     >think that their login name backwards is a good password! Security is
     >relative to a policy (or set of policies) and the operation of a system
     >in conformance with that policy.

   • Finding and plugging security holes
2. Attack Recognition - monitor network traffic and deteck know attack patterns
   • Rule-based approach
   • Statistical-anomaly approach
   • ex. ISS's RealSecure detecks low-level IP attacks including IP spoofing and fragmentation and SYN flooding, as well as high-level attacks (ftp & web)
3. Vulnerable External Devices
   • microphones
   • cameras
4. Next-Generation Firewalls