book

Network and Data Security for Non-Engineers

Name: Network and Data Security for Non-Engineers
ISBN: 9781315350219

by Frank M. Groom, Kevin Groom, Stephan S. Jones

August 2016

Beginner

257 pages

8h 59m

English

Auerbach Publications

Read now

Unlock full access

Cover
Half Title
Title Page
Copyright Page
Table of Contents
Preface
Authors
1 Introduction to Security Threats
2 The 2014–2015 Anthem Blue Cross and Blue Shield Break-In Case Study
Step 1: ReconnaissanceStep 2: Picking the Right Target and Spear Phishing ThemSpear PhishingWaterholesStep 3: Initial System EntryNext Steps to Establish an Undetectable Anonymous Persistent PresencePassword Decryption Process and EquipmentTestbedFinal StepsTools Used by Hackers to Acquire Valid Entry Credentials and Tools Used by Security Personnel to Detect Activity and Malware and Protect the Stored DataTool 1: Initial Spear-Phishing Entry Leading to the ScanBox Keystroke LoggerTool 2: Setting Up an Anonymous Path Using TorTool 3: CrowdStrike Identified Hacker Clusters, China Chopper Web-Shell ControllerCrowdStrike’s Identified Hacking ClustersChina Chopper Web Shell ControllerTypes of Common Monitoring Software EmployedLooking for Derusbi Parsing SoftwareRSA’s ECAT Scanning SoftwareYara’s Operation
3 Anonymous Persistent Threats
Rivest–Shamir–Adleman (RSA) Identified Shell CrewKaspersky Lab Has Identified a Recent Attack Group That Identifies Its Tools as Careto: The MaskDark Web

4 Creating Secure Code
First Principle of Code Protection: Code Isolation and ConfinementCode Isolation TechniquesImplementation of the Four Code-Confinement MethodsReference MonitorsOS ChrootsOS Jail RoutinesFreeBSD JailLinux’s Ptrace Monitor and Systrace RoutinesEmploying Applications Such as Ostia or NACIIsolation of Virtual MachinesComputer VirtualizationThreats to Computer VirtualizationSubverting VM IsolationVM-Based MalwareSoftware Fault Isolation
5 Providing a Secure Architecture
Providing a Secure ArchitectureIsolation and Least PrivilegeAccess Control ConceptsOperating SystemsBrowser Isolation and Least PrivilegeHacking AttacksSpear Phishing and Behavioral AttacksSpoofing, Digital Misrepresentation, and Mobile Security
6 The Hacker Strategy: Expanded
Lab Analysis and Learning VulnerabilitiesHacker StrategiesReconnaissanceAttracting the VictimGain ControlExfiltrate Data and ConscriptOverall: Cloak the SourceAntivirus ProtectionCrack PasswordsThe KeyZero-DaysBasic Control of Hijacking AttacksPlatform DefensesRun-Time DefensesAdvanced Hijacking Attacks: Heap SprayingThe Final Solution to Hacking Attacks
7 Malware, Viruses, Worms, Bugs, and Botnets
IntroductionBotnets: Process and Components and HistoryViruses and WormsA More Detailed Examination of Malware, Viruses, Trojans, and Bots/BotnetsWormsSome Examples of Historical Worm AttacksMorris WormCode Red I and Code Red II WormsNimda WormSQL SlammerConficker WormE-Mail WormsLove Bug WormMyDoom WormStorm Worm and Storm BotnetVirusesVirus PropagationPayloadDetecting a VirusPolymorphic CodeMetamorphic CodeWhen Malware Is DetectedBotnetsStar-Structured BotnetsHierarchical BotnetsDefending from BotnetsAnonymity and SneakinessSneakiness and Side-Channel AttacksCovert ChannelsSecuritySide ChannelsSide Channels in Web SurfingExploiting Side Channels for Stealth ScanningUI Side-Channel SnoopingBugsDetecting Attacks and Removal SystemsIntrusion Detection SystemsHost-Based and Network-Based Intrusion Detection SystemsNetwork-Based Intrusion Detection SystemsHost-Based Intrusion Detection SystemsHoneypot Traps out in the NetworkPassive and Reactive SystemsStatistical Anomaly and Signature-Based IDSsComparison with FirewallsDetection Evasion TechniquesForensicsDetecting Attacks and Attackers with ExamplesSymmetric CryptographyThe Problem of Detecting AttacksDirectory TraversalWhat Is Another Method to Detect This Attack?An Alternate ParadigmDetection AccuracyDetecting Successful AttacksDetection versus BlockingStyles of DetectionSignature BasedVulnerability SignaturesAnomaly BasedSpecification-Based DetectionBehavioral DetectionThe Problem of Evasion
8 Cryptography and the RSA Algorithm
Data Encryption Standard and Advanced Encryption StandardPublic KeysModern Approaches for Breaking EncryptionCurrent Cryptography ConceptsMore Cryptography, Private-Key, Public-Key Encryption, RSA Algorithm Details
9 Browser Security and Cross-Site Scripting
Three Web Threat ModelsWeb-Page ContentCode IsolationBrowser Security ModelHypertext Transfer ProtocolRendering ContentIsolationSecurity User InterfaceCookiesFrame BustingBrowser Code IsolationWeb WorkerSandboxCross-Origin Resource SharingContent Security Policy
10 Banking Security, Zeus, and SpyEye
Fraud ProcessRisk Management Process for BanksZeus and SpyEye AttacksOnline Fraud and the Impacts of Zeus and SpyEye Attacks
11 Web Application Security
Basics of SQL InjectionsMore Examples of Injection-Based AttacksA Review of the ScanBox Software
12 Session Management, User Authentication, and Web Application Security
Session Management and User AuthenticationSession ManagementHTTP CookiesSession IDStoring Session IDsWeb Application SecurityStructured Query Language InjectionAn SQL Injection Example: The CardSystems Solutions AttackCross-Site Request ForgeryCross-Site ScriptingExample of an XSS Attack on PayPalSession Management and User Authentication Conclusion
13 Web Security, DNS Security, and the Internet
14 Network Security and Defenses
Network Security: RecapProtocolsAddress Resolution ProtocolInternet ProtocolPacket SniffingUser Datagram Protocol (UDP)Blind TCP Session HijackingStopping ServicesExhausting ResourcesSYN FloodingSmurf DoS AttacksInternet Control Message ProtocolDistributed Denial-of-Service AttacksCryptographic Network ProtectionInternet Protocol SecurityNetwork AttacksPhysical/Link-Layer Threats: EavesdroppingPhysical/Link-Layer Threats: SpoofingLayer 3 ThreatsLayer 4 TCP and UDP ThreatsDHCP ThreatsDomain Name System ThreatsConcluding Highlights
15 Network Security Protocols and Defensive Mechanisms
Network Security ProtocolsIP Security (IPSec) ProtocolPhase 1Phase 2Layer 2: Link-Layer Connectivity of WirelessTCP/IP Basic Layer 2–3 Security ProblemsDefense Mechanisms That Can Be EmployedVirtual Private NetworkSeveral Different Protocols Then Apply to These ModesBasic Packet FormatsFiltering Network Traffic at the IP LevelBasic Packet FilteringFirewall Stateful Packet FilteringOther Protocols of ConcernIP FragmentationTransport Layer SecurityProxy FirewallWeb Traffic ScanningIntrusion Detection SystemsTwo Critical Infrastructure Protocols: BGP and DNSInfrastructure Protocols for DNS and DNSSECNetwork Control FirewallsSecurity Principle Reference Monitors
16 Denial-of-Service Attacks
17 Mobile Platform Security
Comparison of Mobile PlatformsApple iOS Operating SystemCore OS LayerCore Services LayerMedia LayerCocoa Touch LayerDevelopment of iOS ApplicationsApple iOS SecurityAndroid Mobile SmartphoneAndroid Security ModelSecurity FeaturesApp Development ConceptsExploit PreventionLayers of SecurityJava SandboxApple iOS versus Android Operating System ComparisonsWindows Mobile Models 7 and 8 DevicesWindows Phone OS 7.0 Security Model.NET Code Access Security That Can Be Exploited on Windows PhonesMobile Platform SecurityMobile Platform SecurityAttack Vectors for Mobile Devices
18 Cellular Access Security: 4G LTE, Mobile WiMAX, 5G, and MIMOs
First-Generation Cellular NetworkSecurity Issues and DrawbacksSecond-Generation Cellular NetworkSecurity Issues and DrawbacksThird-Generation Cellular NetworkSecurity Issues and DrawbacksInformation SecuritySecurity AnalysisGoals and Objectives in SecurityBoundaries and Limitations in SecurityTypes of Security IssuesTypes of Security AttacksArchitecture of Security4G Security (LTE and WiMAX)WiMAX IntroductionHistory of WiMAXEvolution of Mobile WiMAXMobile WiMAX ArchitectureWiMAX Security, Threats, and Solutions4G LTE IntroductionHistory of 4G LTE4G LTE Architecture4G LTE Security, Threats, and SolutionsA 5G Future5G SecurityHetNetsMassive MIMOMillimeter WaveConclusion
19 Wireless LAN Security
Regulatory WLAN Security Standards802.11a802.11b802.11g802.11n802.11ac802.11af802.11iWire Lined to Wireless TransitionWNICCorporate Background of Wireless NetworksWireless Network Security MethodsCIA Triangle of Confidentiality, Integrity, and AvailabilitySmart CardsSecurity Tokens and Software TokensWireless Security History, Standards, and DevelopmentsWired Equivalent PrivacyWi-Fi Protected AccessTemporal Key Integrity Protocol (TKIP)Extensible Authentication Protocol (EAP)Lightweight Extensible Authentication Protocol (LEAP)Protected Extensible Authentication Protocol (PEAP)Wireless Transport Layer Security (WTLS)Wi-Fi Protected Setup (WPS)WPA2Other Security ConsiderationsThreats of Wireless NetworksConfidentiality AttacksAccess Control AttacksConclusion
20 The Stuxnet Worm and the Vulnerability of the U.S. Electric Power Grid
More Details of the Stuxnet Worm Used for Cyber WarfareAttack ProcessPath 1: Via WinCCPath 2: Via Network SharesPath 3: Via the MS10-061 Print Spooler 0-Day VulnerabilityPath 4: Via the MS08-067 SMB VulnerabilityPath 5: Via Step7 ProjectsStuxnet DamageCyber Terrorism after StuxnetStuxnet Attack SummaryResponse and Industrial Control SecurityThe Vulnerable U.S. Electronic Power GridComponents and Operating Elements of the U.S. Electric Power GridIrreplaceable Large Power Transformers and Our Smart Grid RiskSmart MetersProgrammable Logic ControllersAdvantages of PLCsDistribution Transformers and ControllersLocal PLC Inner-Loop ControllerA SCADA SystemConclusion
21 Cyber Warfare
Weapons of Cyber WarCyber Crime as a ServiceHacktivists
22 Conclusion
Bibliography
Appendix
Index

Content preview from Network and Data Security for Non-Engineers

Chapter 6

The Hacker Strategy: Expanded

Third-party software is the most vulnerable component in a system. For example, the iPhones released by Apple might have been fully penetration tested and checked out, but a single app installed after the user has access could circumvent the barriers set up by the manufacturer (Figure 6.1).

It is incorrect to describe “third parties” as simply additional apps that have been installed. Additional third parties could be an application programming interface (API) that was installed for a specific feature in an operating system (OS). Most of the time, this third party may not be in use and is merely lying dormant, waiting to accept input from a local app or from remote users. In many cases, attacks will start ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781315350219

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Network and Data Security for Non-Engineers

by Frank M. Groom, Kevin Groom, Stephan S. Jones

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.