IpMorph : «vers la mystification de la prise d'empreinte de pile»
|
|
|
- Jocelyn Blake
- 6 years ago
- Views:
Transcription
1 IpMorph is an Open Source project owned, developed and supported by DIATEAM This document is licensed under a Creative Commons Attribution 3.0 License IpMorph : «vers la mystification de la prise d'empreinte de pile» Présentation à l OSSIRB 17 février /02/17 guillaume.prigent@diateam.net - DIATEAM 1
2 Sommaire Contexte Historique Etymologie Techniques de détection Etat de l art de la mystification Utilisation d IpMorph IpMorph!= Packet Purgatory / Morph Socle logiciel Architecture générale Translation ARP Mystification de la congestion Focus : Calcul ISN Focus : Interfaces réseaux «read/write» Personality Manager Démonstration Etat d avancement Perspectives Bibliographie 2009/02/17 guillaume.prigent@diateam.net - DIATEAM 2
3 Contexte Théorème : «Vivons heureux, vivons caché» Corolaire : «Si une machine peut falsifier son identité au yeux des outils de reconnaissance et usurper celle d un système moins intéressant pour la menace, celle ci minimise l attrait de l attaquant et perturbe la pertinence des attaques ciblées à sa nature apparente.» 2009/02/17 guillaume.prigent@diateam.net - DIATEAM 3
4 1999 Historique GFOX-0 & GFOX-1 Simulation multi-agents de la confidentialité, de l intégrité et de la disponibilité d un système d information EREBOR Vers l hybride «réel/virtuel» BridNet Première pile «UserLand TCP/IP» Hynesim Plateforme de virtualisation de système d information ? 2009/02/17 guillaume.prigent@diateam.net - DIATEAM 4
5 Etymologie IpMorph Du néo-grec numérique μορφή - θημωνιά, morphéstakis, «forme de pile». Suffixe -morph /mɔʁf/ 1. En relation avec la forme d une pile IP, qui a la forme d une pile IP. Apparentés étymologiques 1. FpFucker 2. OS fingerprint frustrating 2009/02/17 guillaume.prigent@diateam.net - DIATEAM 5
6 Techniques de détection [11] 2009/02/17 - DIATEAM 6
7 Etat de l'art de la mystification [7] Filtrage Stealth patch : Unmaintained as of 2002, GNU/Linux kernel [14] Blackhole : FreeBSD, kernel options [16] IPlog : Unmaintaned as of 2001, *BSD [17] Packet filter : OpenBSD [18] Configuration et modification de pile TCP/IP ("host based") Ip Personality [19] Fingerprint Fucker [12][13] Fingerprint scrubber [1] OSfuscate [8] Substitution de pile TCP/IP ("proxy behaviour") Honeyd [9] Packet purgatory / Morph [10] 2009/02/17 guillaume.prigent@diateam.net - DIATEAM 7
8 Utilisation d IpMorph 1/2 IpMorph en coupure de machines réelles 2009/02/17 guillaume.prigent@diateam.net - DIATEAM 8
9 Utilisation d IpMorph 2/2 IpMorph en relai protection de machines virtuelles 2009/02/17 guillaume.prigent@diateam.net - DIATEAM 9
10 IpMorph!= Packet Purgatory / Morph [20] 2009/02/17 guillaume.prigent@diateam.net - DIATEAM 10
11 Socle logiciel Langage C++ Application «UserLand» Framework Qt4 Eléments constituants : IpMorph (Core) IpMorph Controller IpMorph Personality Manager IpMorph Personality Database IpView (IpMorph GUI) Portabilité : GNU/Linux *BSD, Mac OS License GPLv3 2009/02/17 guillaume.prigent@diateam.net - DIATEAM 11
12 Architecture générale 2009/02/17 - DIATEAM 12
13 Translation ARP 2009/02/17 - DIATEAM 13
14 Mystification de la congestion - SYN+ACK 2009/02/17 guillaume.prigent@diateam.net - DIATEAM 14
15 Mystification de la congestion - FIN+ACK «client» 2009/02/17 guillaume.prigent@diateam.net - DIATEAM 15
16 Mystification de la congestion - FIN+ACK «serveur» 2009/02/17 guillaume.prigent@diateam.net - DIATEAM 16
17 Focus : Calcul ISN Génération de l ISN pour l ancienne version de Nmap (<4.11) 2009/02/17 guillaume.prigent@diateam.net - DIATEAM 17
18 Focus : Interfaces réseaux «read/write» Ouvertures des interfaces (eth, tap) pour capture et injection 2009/02/17 guillaume.prigent@diateam.net - DIATEAM 18
19 v1.0 Personality Manager : Structure de l index Formalisation XML et association des signatures des outils d OSFP 2009/02/17 guillaume.prigent@diateam.net - DIATEAM 19
20 Personality Manager : Présentation 2009/02/17 guillaume.prigent@diateam.net - DIATEAM 20
21 Personality Manager : Démonstration 2009/02/17 guillaume.prigent@diateam.net - DIATEAM 21
22 Personality Manager : Database Overview 2009/02/17 guillaume.prigent@diateam.net - DIATEAM 22
23 IpMorph : Illustration pratique DEMONSTRATION 2009/02/17 guillaume.prigent@diateam.net - DIATEAM 23
24 Etat d avancement Conception = 70% Etat de l art bibliographique = 85% Etat de l art technique mystification = 70% Analyse des outils d OSFP = 70% Nmap = 80% Xprobe2 = 95% SinFP = 60% Satori = 45% Ring2 = 80% Architecture générale = 80% Spécification & UML/Software design= 50% Implémentation = 10% Proof of concept «trash programming» = 85% Développement des composants = 5% (50% pour Personality Manager) Tests unitaires, tests fonctionnels, documentation = 5% 2009/02/17 guillaume.prigent@diateam.net - DIATEAM 24
25 Perspectives Juin 2009 SSTIC 2009 Beta release 0.5 en download Site web, Mailing list, Bugtracking Subversion / sources Décembre 2009 Version 1.0 en download Documentation, UserGuide, DevGuide Distribution.deb,.rpm, Intégration de quelques scrubbers applicatifs (DNS, SMB, DHCP, ). 2009/02/17 guillaume.prigent@diateam.net - DIATEAM 25
26 Bibliographie 1/2 1. Smart, M., Malan, G.R., Jahanian, F.: Defeating TCP/IP Stack Fingerprinting, 9th USENIX Security Symp. 2. Smith, C., Grundl, P. : Know Your Enemy: Passive Fingerprinting, (2002) 3. Fyodor : Remote OS detection via TCP/IP Stack FingerPrinting, Phrack 1998, (1998) 4. Spangler, R.: Analysis of Remote Active Operating System Fingerprinting Tools, 5. Veysset, F., Courtay, O., Heen, O.: New Tool And Technique For Remote Operating System Fingerprinting, (2002) 6. Auffret, P. : SinFP, Unification de la prise d'empreinte passive et active des systèmes d'exploitation, SSTIC 08, (2008) 7. Berrueta, D.B.: A practical approach for defeating Nmap OS-Fingerprinting, (2003) 8. Crenshaw, A. : OSfuscate: Change your Windows OS TCP/IP Fingerprint to confuse P0f, NetworkMiner, Ettercap, Nmap and other OS detection tools, (2008) 9. Provos, N. : Honeyd: A Virtual Honeypot Daemon, (2003) 10. Wang, K. : Frustrating OS Fingerprinting with Morph, Morph-TheFifthHOPE.pdf, The Fifth HOPE, (2004) 11. Veysset, F., Courtay, O., Heen, O.: Détection des systems d exploitation avec RINGv2, Actes SSTIC, (2003) 12. Fusys,CyRaX : Fingerprint Fucker, Reed, D. : Fingerprint Fucker, Trifero, S., Callaway, D. : Linux Kernel Stealth Patch, /02/17 guillaume.prigent@diateam.net - DIATEAM 26
27 Bibliographie 2/2 15. Aubert, S. : Antimap, FreeBSD, Blackhole, McCabe, R. : Iplog, OpenBSD : PF «le filtrage de paquet», Roualland, G., Saffroy, J-M. : IP Personality, Wang, K. : Frustrating OS Fingerprinting with Morph, DEFCON 12, (2004) 2009/02/17 guillaume.prigent@diateam.net - DIATEAM 27
28 IpMorph is an Open Source project owned, developed and supported by DIATEAM This document is licensed under a Creative Commons Attribution 3.0 License Merci de votre attention. Interrogations? Critiques! Suggestions Nous contacter : contact@ipmorph.org Beta Release /02/17 guillaume.prigent@diateam.net - DIATEAM 28
IpMorph : Unification of OS fingerprinting defeating or, how to defeat common OSFP tools.
IpMorph : Unification of OS fingerprinting defeating or, how to defeat common OSFP tools. Guillaume PRIGENT Florian VICHOT DIATEAM - Brest 1 Context Reason for creating IpMorph : Hynesim Project: We needed
A practical approach for defeating Nmap OS-Fingerprinting
A practical approach for defeating Nmap OS-Fingerprinting David Barroso Berrueta http://voodoo.somoslopeor.com tomac@somoslopeor.com Remote OS Fingerprinting is becoming more and more important, not only
Camouflaging Servers to Avoid Exploits Morgon Kanter and Stephen Taylor Thayer School of Engineering at Dartmouth College tr11-001
Camouflaging Servers to Avoid Exploits Morgon Kanter and Stephen Taylor Thayer School of Engineering at Dartmouth College tr11-001 Abstract: The goal of this research is to increase attacker workload by
Ambiguity Resolution via Passive OS Fingerprinting
Ambiguity Resolution via Passive OS Fingerprinting Greg Taleck NFR Security, Inc., 5 Choke Cherry Rd, Suite 200, Rockville, MD 20850 taleck@nfr.com http://www.nfr.com/ Abstract. With more widespread use
What this talk is about?
On the Current State of Remote Active OS Fingerprinting Tools Ofir Arkin CTO ofir.arkin@insightix.com Defcon 13 1 What this talk is about? This talk examines different aspects of remote active operating
SinFP3. More Than a Complete Framework for Operating System Fingerprinting v1.0. Patrice
SinFP3 More Than a Complete Framework for Operating System Fingerprinting v1.0 Patrice Auffret @PatriceAuffret @networecon `whoami` Patrice Auffret 10+ years of InfoSec experience www.gomor.org
SNAP: ROBUST TOOL FOR INTERNET-WIDE OPERATING SYSTEM FINGERPRINTING. A Thesis ANKUR BHARATBHUSHAN NANDWANI
SNAP: ROBUST TOOL FOR INTERNET-WIDE OPERATING SYSTEM FINGERPRINTING A Thesis by ANKUR BHARATBHUSHAN NANDWANI Submitted to the Office of Graduate Studies of Texas A&M University in partial fulfillment of
Application Presence Fingerprinting for NAT-Aware Router
Application Presence Fingerprinting for NAT-Aware Router Jun Bi, Lei Zhao, and Miao Zhang Network Research Center, Tsinghua University Beijing, P.R. China, 100084 junbi@cernet.edu.cn Abstract. NAT-aware
Building an IPS solution for inline usage during Red Teaming
Building an IPS solution for inline usage during Red Teaming Repurposing defensive technologies for offensive Red Team operations K. Mladenov A. Zismer {kmladenov,azismer}@os3.nl Master Students in System
SinFP, Unication Of Active And Passive Operating System Fingerprinting
SinFP, Unication Of Active And Passive Operating System Fingerprinting Patrice Auret Thomson Corporate Research Security Labs 1, av. Belle-Fontaine - CS 17616 35576 Cesson-Sévigné - France patrice.auffret@thomson.net
SANS SEC504. Hacker Tools, Techniques, Exploits and Incident Handling.
SANS SEC504 Hacker Tools, Techniques, Exploits and Incident Handling http://killexams.com/exam-detail/sec504 QUESTION: 315 Which of the following techniques can be used to map 'open' or 'pass through'
CIT 480: Securing Computer Systems
CIT 480: Securing Computer Systems Scanning CIT 480: Securing Computer Systems Slide #1 Topics 1. Port Scanning 2. Stealth Scanning 3. Version Identification 4. OS Fingerprinting CIT 480: Securing Computer
Active fingerprinting
Active 802.11 fingerprinting Sergey Bratus Cory Cornelius, Daniel Peebles, Axel Hansen INSTITUTE FOR SECURITY TECHNOLOGY STUDIES Cyber Security and Trust Research & Development http:// Motivation Can a
New Tool And Technique For Remote Operating System Fingerprinting Full Paper
New Tool And Technique For Remote Operating System Fingerprinting Full Paper Franck Veysset, Olivier Courtay, Olivier Heen, Intranode Research Team April 2002, v1.1 Abstract Information gathering is an
TP5 Sécurité IPTABLE. * :sunrpc, localhost :domain,* :ssh, localhost :smtp, localhost:953,*: Tous sont des protocoles TCP
TP5 Sécurité IPTABLE Routage classique Q1) Sur la machiine FIREWALL, les services actifs sont : Netstat -a * :sunrpc, localhost :domain,* :ssh, localhost :smtp, localhost:953,*:53856. Tous sont des protocoles
WorkShop Forum Technique: Symantec NetBackup et virtualisation en partenariat avec VMware
WorkShop Forum Technique: Symantec NetBackup et virtualisation en partenariat avec VMware Laurent Delaisse Sr PreSales Manager Technical Specialist Workshop Forum Technique : Symantec - VMware 1 Overview
Faulds: A Non-Parametric Iterative Classifier for Internet-Wide OS Fingerprinting
Faulds: A Non-Parametric Iterative Classifier for Internet-Wide OS Fingerprinting Zain Shamsi,, Daren B.H. Cline, and Dmitri Loguinov Internet Research Lab Department of Computer Science and Engineering
INF5290 Ethical Hacking. Lecture 3: Network reconnaissance, port scanning. Universitetet i Oslo Laszlo Erdödi
INF5290 Ethical Hacking Lecture 3: Network reconnaissance, port scanning Universitetet i Oslo Laszlo Erdödi Lecture Overview Identifying hosts in a network Identifying services on a host What are the typical
VHDL par Ahcène Bounceur VHDL
VHDL Ahcène Bounceur 2009 Plan de travail 1. Introduction au langage 2. Prise en main 3. Machine à état 4. Implémentation sur FPGA 1 VHDL Introduction au langage Ahcène Bounceur VHDL VHIC (Very High-speed
Ofir Arkin CTO
On the Current State of Remote Active OS Fingerprinting Tools Ofir Arkin CTO ofir.arkin@insightix.com Defcon 13 1 What this talk is about? This talk examines different aspects of remote active operating
CE Advanced Network Security Honeypots
CE 817 - Advanced Network Security Honeypots Lecture 12 Mehdi Kharrazi Department of Computer Engineering Sharif University of Technology Acknowledgments: Some of the slides are fully or partially obtained
Honeyd A OS Fingerprinting Artifice
Abstract Honeyd A OS Fingerprinting Artifice Craig Valli School of Information and Computer Science Edith Cowan University Western Australia e-mail:c.valli@ecu.edu.au This research looks at the efficiency
A Robust Classifier for Passive TCP/IP Fingerprinting
A Robust Classifier for Passive TCP/IP Fingerprinting Rob Beverly MIT CSAIL rbeverly@csail.mit.edu April 20, 2004 PAM 2004 Typeset by FoilTEX Outline A Robust Classifier for Passive TCP/IP Fingerprinting
IPv6 Neighbor Discovery Protocol based OS fingerprinting
INSTITUT NATIONAL DE RECHERCHE EN INFORMATIQUE ET EN AUTOMATIQUE IPv6 Neighbor Discovery Protocol based OS fingerprinting Frédéric Beck, Olivier Festor and Isabelle Chrisment N???? March 2007 Thème COM
Read me carefully before making your connections!
CROSS GAME USER GUIDE Read me carefully before making your connections! Warning: The CROSS GAME converter is compatible with most brands of keyboards and Gamer mice. However, we cannot guarantee 100% compatibility.
Unicornscan Documentation Getting Started
Getting Started Presented to End Users Important Notice: This documentation is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
Les infrastructures au rythme des applications
Partner Logo Les infrastructures au rythme des applications EMC Forum 2013 Eric Debray Cisco Les infrastrcutures au rythme des applications Assurer la gestion opérationnelle au quotidien Aligner les infrastructures
This document is a preview generated by EVS
INTERNATIONAL STANDARD NORME INTERNATIONALE IEC 60848 Edition 3.0 2013-02 GRAFCET specification language for sequential function charts Langage de spécification GRAFCET pour diagrammes fonctionnels en
Using Neural Networks for remote OS Identification
Using Neural Networks for remote OS Identification Javier Burroni - Carlos Sarraute Core Security Technologies PacSec/core05 conference OUTLINE 1. Introduction 2. DCE-RPC Endpoint mapper 3. OS Detection
D4.4 Device fingerprinting
SEVENTH FRAMEWORK PROGRAMME Theme SEC-2011.2.5-1 (Cyber attacks against critical infrastructures) D4.4 Device fingerprinting Contract No. FP7-SEC-285477-CRISALIS Workpackage WP 4 - System Discovery Author
ControlLogix Redundant Power Supply Chassis Adapter Module
Installation Instructions ControlLogix Redundant Power Supply Chassis Adapter Module Catalog Number 1756-PSCA Use this publication as a guide when installing the ControlLogix 1756-PSCA chassis adapter
Network Function Property Algorithm. CounterACT Technical Note
Table of Contents About the Network Function Property... 3 Network Function Algorithm Criteria... 4 1. Manual Classification... 4 2. Managed CounterACT Appliance... 4 3. Managed Endpoint... 4 4. Switch
Sun Java System Access Manager Release Notes for Microsoft Windows
Sun Java System Access Manager Release Notes for Microsoft Windows Version 6 2005Q1 Part Number 819-1574-10 These Release Notes contain important information available at the time of release of Sun Java
About Transferring License Rights for. PL7 V4.5 and Unity Pro V2.3 SP1 Software
Page 1 of 38 Click here to access the English Cliquez ici pour accéder au Français Klicken Sie hier, um zum Deutschen zu gelangen Premete qui per accedere all' Italiano Pulse acquì para acceder al Español
Honeypot Hacker Tracking and Computer Forensics
Honeypot Hacker Tracking and Computer Forensics Manfred Hung manfred.hung@pisa.org.hk Agenda Honeypot History Value of Honeypot Honeypot Technology Common Honypot products/solutions Honeypot deployment
Internet Office 120V 600VA 300W Standby UPS, Ultra-Compact Desktop, USB
Internet Office 120V 600VA 300W Standby UPS, Ultra-Compact Desktop, USB NUMÉRO DE MODÈLE: INTERNET600U Points principaux 600VA ultra-compact 120V standby UPS Maintains AC output during power failures 4
ETHICAL HACKING & COMPUTER FORENSIC SECURITY
ETHICAL HACKING & COMPUTER FORENSIC SECURITY Course Description From forensic computing to network security, the course covers a wide range of subjects. You will learn about web hacking, password cracking,
Scanning. Course Learning Outcomes for Unit III. Reading Assignment. Unit Lesson UNIT III STUDY GUIDE
UNIT III STUDY GUIDE Course Learning Outcomes for Unit III Upon completion of this unit, students should be able to: 1. Recall the terms port scanning, network scanning, and vulnerability scanning. 2.
Using a VMware Network Infrastructure to Collect Traffic Traces for Intrusion Detection Evaluation
Using a VMware Network Infrastructure to Collect Traffic Traces for Intrusion Detection Evaluation by Frederic Massicotte, Mathieu Couture and Annie De Montigny Leboeuf http://www.crc.ca/networksystems_security/
A Robust Classifier for Passive TCP/IP Fingerprinting
A Robust Classifier for Passive TCP/IP Fingerprinting Robert Beverly MIT Computer Science and Artificial Intelligence Laboratory rbeverly@csail.mit.edu Abstract. Using probabilistic learning, we develop
Ramassage Miette Garbage Collector
http://www-adele.imag.fr/users/didier.donsez/cours Ramassage Miette Garbage Collector Didier DONSEZ Université Joseph Fourier PolyTech Grenoble LIG/ADELE Didier.Donsez@imag.fr, Didier.Donsez@ieee.org Motivations
International Journal of Advancements in Research & Technology, Volume 2, Issue 6, June ISSN
International Journal of Advancements in Research & Technology, Volume 2, Issue 6, June-2013 53 Dynamic Honeypot Construction Amanjot Kaur Assistant Professor S.D.S.P.M. College for Women, (Rayya), Amritsar,
Michael Rash DEFCON 12 07/31/2004
Advanced Netfilter: Content Replacement (ala Snort_inline) and Combining Port Knocking with p0f Michael Rash DEFCON 12 07/31/2004 http://www.enterasys.com http://www.cipherdyne.org Introduction Port knocking
Concilier Gouvernance et DevOps? AWS vous permet de satisfaire l'équation!
Concilier Gouvernance et DevOps? AWS vous permet de satisfaire l'équation! Ludovic Tressol - Directeur de l infrastructure Cloud, Gemalto Walid Benabderrahmane - Architecte Solutions, Amazon Web Services
Wiki et web sémantique Attention! Michel Buffa, Guillaume Ereteo, Fabien Gandon. WikiHistorique
Wiki et web sémantique Attention! Michel Buffa, Guillaume Ereteo, Fabien Gandon WikiHistorique 1 Naviguer? Editer? 2 Interopérabilité? Indexer? Chercher? Organiser? Réutiliser? Utiliser??? Et si on ré-inventait
Sun Control Station. Performance Module. Sun Microsystems, Inc. Part No September 2003, Revision A
Sun Control Station Performance Module Sun Microsystems, Inc. www.sun.com Part No. 817-3610-10 September 2003, Revision A Submit comments about this document at: http://www.sun.com/hwdocs/feedback Copyright
Docker dans l Entreprise. Pascal Pignon
Docker dans l Entreprise Pascal Pignon pascal.pignon@docker.com Résumé des annonces de la Dockercon Docker dans l Entreprise Support de Kubernetes Moderniser les Applis Traditionnelles (MTA) Client : MetLife
Providing Cluster Environments with High-Availability and Load-Balancing
Providing Cluster Environments with High-Availability and -Balancing M.A.R. Dantas a, R.M. Alvim b, F.L.L. Grossmann b a Department of Informatics and Statistics (INE), Federal University of Santa Catarina
CSC 574 Computer and Network Security. TCP/IP Security
CSC 574 Computer and Network Security TCP/IP Security Alexandros Kapravelos kapravelos@ncsu.edu (Derived from slides by Will Enck and Micah Sherr) Network Stack, yet again Application Transport Network
Windows Server 2003 Installation Configuration Et Administration Pdf
Windows Server 2003 Installation Configuration Et Administration Pdf Enable SharePoint Administration Service. 55. 4.5. Configure Windows the installation and audit configuration processes. 1.1. Netwrix
Analyse statique de programmes avioniques
June 28th 2013. Forum Méthodes Formelles Cycle de conférences: Analyse Statique : «Retour d expériences industrielles» Analyse statique de programmes avioniques Presenté par Jean Souyris (Airbus Opérations
How to Configure Mobile VPN for Forcepoint NGFW TECHNICAL DOCUMENT
How to Configure Mobile VPN for Forcepoint NGFW TECHNICAL DOCUMENT Table of Contents TABLE OF CONTENTS 1 BACKGROUND 2 WINDOWS SERVER CONFIGURATION STEPS 2 CONFIGURING USER AUTHENTICATION 3 ACTIVE DIRECTORY
Knowledge Engineering Models and Tools for the Digital Scholarly Publishing of Manuscripts
Knowledge Engineering Models and Tools for the Digital Scholarly Publishing of Manuscripts Semantic Web for the Digital Humanities Sahar Aljalbout, Giuseppe Cosenza, Luka Nerima, Gilles Falquet 1 Cultural
Repurposing defensive technologies for offensive Red Team operations
MSc System and Network Engineering Repurposing defensive technologies for offensive Red Team operations Kristiyan Mladenov Arne Zismer {kmladenov,azismer}@os3.nl February 12, 2017 Abstract Performing a
Réinitialisation de serveur d'ucs série C dépannant TechNote
Réinitialisation de serveur d'ucs série C dépannant TechNote Contenu Introduction Conditions préalables Conditions requises Composants utilisés Sortie prévue pour différents états de réinitialisation Réinitialisation
Sun Management Center 3.5 Service Availability Manager User s Guide
Sun Management Center 3.5 Service Availability Manager User s Guide Sun Microsystems, Inc. 4150 Network Circle Santa Clara, CA 95054 U.S.A. Part No: 816 7416 10 May, 2003 Copyright 2003 Sun Microsystems,
Honeyconf: Automated Script for generating Honeyd Configuration to Detect Intruders
Honeyconf: Automated Script for generating Honeyd Configuration to Detect Intruders Anu Kamboj 1, Ms. Renu Singla 2 1M.Tech Student, Dept. Of CSE, Shri Ram College of Engg. & Mgmt, Palwal, Haryana, India
Tutorial 1 : minimal example - simple variables replacements
Tutorial 1 : minimal example - simple variables replacements The purpose of this tutorial is to show you the basic feature of odtphp : simple variables replacement. require_once('../library/odf.php');
Routing and security for remote labs for teaching and research (SRS-E-LABO)
Routing and security for remote labs for teaching and research (SRS-E-LABO) Alassane Diop Research Associate, Center for Research LICEF, TELUQ / UQAM, Montréal, Québec, Canada Abstract: In this paper,
TP 2 : Application SnapTchat 20 février 2015
TP 2 : Application SnapTchat 20 février 2015 SnapTchat : cahier de charges L objectif de ce TP est de développer une simple application d échange de messages courts entre deux utilisateurs. Le cahier des
inside: THE MAGAZINE OF USENIX & SAGE April 2002 Volume 27 Number 2 SECURITY A Remote Active OS Fingerprinting Tool Using ICMP BY OFIR ARKIN
THE MAGAZINE OF USENIX & SAGE April 2002 Volume 27 Number 2 inside: SECURITY A Remote Active OS Fingerprinting Tool Using ICMP BY OFIR ARKIN & The Advanced Computing Systems Association & The System Administrators
Nmap & Metasploit. Chun-Jen (James) Chung. Arizona State University
Nmap & Metasploit Chun-Jen (James) Chung Nmap recap Nmap uses raw IP packets in novel ways to determine what hosts are available on the network What services (application name and version) those hosts
Planning Premier Workshops de Septembre 2018 à Juin 2019 Microsoft Services Edition Juillet 2018
Planning Premier Workshops de Septembre 2018 à Juin 2019 Microsoft Services Edition Juillet 2018 Vous trouverez ci-dessous la liste de nos formations disponibles à ce jour. D autres sessions viendront
Beyond a sensor. Towards the Globalization of SURFids. FIRST 20 th Annual Conference Vancouver, Canada
Beyond a sensor Towards the Globalization of SURFids Wim.Biemolt@surfnet.nl FIRST 20 th Annual Conference Vancouver, Canada 1 SURFnet6 2 SURFcert 3 18 th Annual FIRST Conference Goals - Understanding:
Operating Systems. Week 13 Recitation: Exam 3 Preview Review of Exam 3, Spring Paul Krzyzanowski. Rutgers University.
Operating Systems Week 13 Recitation: Exam 3 Preview Review of Exam 3, Spring 2014 Paul Krzyzanowski Rutgers University Spring 2015 April 22, 2015 2015 Paul Krzyzanowski 1 Question 1 A weakness of using
SunVTS Quick Reference Card
SunVTS Quick Reference Card Sun Microsystems, Inc. 901 San Antonio Road Palo Alto, CA 94303-4900 U.S.A. 650-960-1300 Part No. 806-6519-10 January 2001, Revision A Send comments about this document to:
CS 416: Operating Systems Design April 22, 2015
Question 1 A weakness of using NAND flash memory for use as a file system is: (a) Stored data wears out over time, requiring periodic refreshing. Operating Systems Week 13 Recitation: Exam 3 Preview Review
SunVTS Quick Reference Card
SunVTS Quick Reference Card Sun Microsystems, Inc. www.sun.com Part No. 820-1672-10 September 2007, Revision 01 Submit comments about this document at: http://www.sun.com/hwdocs/feedback Copyright 2007
1 PORT HARDENED SERIAL SERVER
QUICK START GUIDE LES421A 1 PORT HARDENED SERIAL SERVER 24/7 TECHNICAL SUPPORT AT 877.877.2269 OR VISIT BLACKBOX.COM STEP 1 - Check for All Required Hardware 1-Port Hardened Serial Server This Quick Start
Network Security. Kitisak Jirawannakool Electronics Government Agency (public organisation)
1 Network Security Kitisak Jirawannakool Electronics Government Agency (public organisation) A Brief History of the World 2 OSI Model vs TCP/IP suite 3 TFTP & SMTP 4 ICMP 5 NAT/PAT 6 ARP/RARP 7 DHCP 8
FIRST YEAR EXAM INFORMATION SESSION November 2017
FIRST YEAR EXAM INFORMATION SESSION November 2017 All information is posted on the SAO website: https://www.mcgill.ca/law-studies/coursesregistration-exams/exams/computerized-exams FIRST YEAR EXAM INFORMATION
1. KNOWN ISSUES Minimum TWinSoft version: Minimum TView version: NEW FEATURES... 5
TView - 3.02 - Release notes April, 2018 TView build number: 487 TComm.dll version: 5.1.0.272 Table of Contents 1. KNOWN ISSUES... 3 1.1. LOGIN PROXY NOT SUPPORTED... 3 1.2. WITH FRENCH VERSION, IMPOSSIBLE
Functional Blue Prints for the Development of a KMapper Prototype
Functional Blue Prints for the Development of a KMapper Prototype SOFTWARE DESIGN DOCUMENT KMAPPER KNOWLEDGE INFERRING SERVICES And prepared by Martin Froment and Ludovic Tobin Fujitsu Consulting (Canada)
ForeScout CounterACT. Plugin. Configuration Guide. Version 2.1
ForeScout CounterACT Core Extensions Module: DHCP Classifier Plugin Version 2.1 Table of Contents About the DHCP Classifier Plugin... 3 What to Do... 3 Requirements... 3 Verify That the Plugin Is Running...
Wireshark: Are You Under Attack? Kyle Feuz School of Computing
Wireshark: Are You Under Attack? Kyle Feuz School of Computing Introduction Download Wireshark and capture files https://www.wireshark.org/download.html http://icarus.cs.weber.edu/~kfeuz/downloads/sai
Muhammad Farooq-i-Azam CHASE-2006 Lahore
Muhammad Farooq-i-Azam CHASE-2006 Lahore Overview Theory Existing Sniffers in action Switched Environment ARP Protocol and Exploitation Develop it yourself 2 Network Traffic Computers and network devices
Sun Management Center 3.5 Supplement for VSP High-End Entry Servers (Workgroup Servers)
Sun Management Center 3.5 Supplement for VSP High-End Entry Servers (Workgroup Servers) Sun Microsystems, Inc. 4150 Network Circle Santa Clara, CA 95054 U.S.A. 650-960-1300 Part No. 816-7259-10 August
A Reliable Transport Protocol for Resource Constrained Nodes: CRCTP - Protocol Design
A Reliable Transport Protocol for Resource Constrained Nodes: CRCTP - Protocol Design Un Protocole de transport avec garantie de livraison pour les appareils de communications aux ressources limitées :
Implementing Cisco Cybersecurity Operations
210-255 Implementing Cisco Cybersecurity Operations NWExam.com SUCCESS GUIDE TO CISCO CERTIFICATION Exam Summary Syllabus Questions Table of Contents Introduction to 210-255 Exam on Implementing Cisco
INSTRUCTION MANUAL INSTRUCTION MANUAL
PACK MATERNITY INSTRUCTION MANUAL INSTRUCTION MANUAL Specially designed for deaf and hearing impaired people. All your products sent together are already connected to each other. 2 2 Summary : 4 : The
Hacker Academy Ltd COURSES CATALOGUE. Hacker Academy Ltd. LONDON UK
Hacker Academy Ltd COURSES CATALOGUE Hacker Academy Ltd. LONDON UK TABLE OF CONTENTS Basic Level Courses... 3 1. Information Security Awareness for End Users... 3 2. Information Security Awareness for
Sun Cluster Data Service for NetBackup Guide for Solaris OS
Sun Cluster Data Service for NetBackup Guide for Solaris OS SPARC Platform Edition Sun Microsystems, Inc. 4150 Network Circle Santa Clara, CA 95054 U.S.A. Part No: 819 0693 10 August 2005, Revision A Copyright
Solaris 9 9/04 Installation Roadmap
Solaris 9 9/04 Installation Roadmap This document is a guide to the DVD-ROM, CD-ROMs, and documents involved in installing the Solaris 9 9/04 software. Unless otherwise specified, this document refers
Revolutionizing Active Operating System Fingerprinting The Present & Future of Xprobe2. Ofir Arkin
Revolutionizing Active Operating System Fingerprinting The Present & Future of Xprobe2 Ofir Arkin ofir@sys-security.com Founder Agenda Introduction Ofir Arkin The Xprobe2 project The Problems/Issues with
VLANs. Commutation LAN et Wireless Chapitre 3
VLANs Commutation LAN et Wireless Chapitre 3 ITE I Chapter 6 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 1 Objectifs Expliquer le rôle des VLANs dans un réseau convergent. Expliquer le rôle
n Given a scenario, analyze and interpret output from n A SPAN has the ability to copy network traffic passing n Capacity planning for traffic
Chapter Objectives n Understand how to use appropriate software tools to assess the security posture of an organization Chapter #7: Technologies and Tools n Given a scenario, analyze and interpret output
IPv6 associated protocols
IPv6 associated protocols Address auto-configuration in IPv6 Copy Rights This slide set is the ownership of the 6DISS project via its partners The Powerpoint version of this material may be reused and
Solaris 8 6/00 Sun Hardware Roadmap
Solaris 8 6/00 Sun Hardware Roadmap This document is a guide to the CDs and documents involved in installing the Solaris 8 6/00 software. Note The arrangement of CDs in the Solaris 8 product is different
Formation. Application Server Description du cours
Formation Application Server 2017 Description du cours Formation Application Server 2017 Description Cette formation d une durée de 5 jours aborde les concepts de l infrastructure logicielle System Platform
EFFECTIVE NUMERICAL ANALYSIS METHOD APPLIED TO THE ROLL-TO-ROLL SYSTEM HAVING A WINDING WORKPIECE
EFFECTIVE NUMERICAL ANALYSIS METHOD APPLIED TO THE ROLL-TO-ROLL SYSTEM HAVING A WINDING WORKPIECE Sungham Hong 1, Juhwan Choi 1, Sungsoo Rhim 2 and Jin Hwan Choi 2 1 FunctionBay, Inc., Seongnam-si, Korea
Forescout. Configuration Guide. Version 8.1
Forescout Version 8.1 Contact Information Forescout Technologies, Inc. 190 West Tasman Drive San Jose, CA 95134 USA https://www.forescout.com/support/ Toll-Free (US): 1.866.377.8771 Tel (Intl): 1.408.213.3191
XML & DBs Interrogation des documents XML
XML & DBs Interrogation des documents XML A.Boukottaya Interrogation des documents XML HyOQL SGMLQL StruQL Before XML W3QL Lorel XMLQL.. XQL Xpath XML Xquery W3C standard 2 XPath (chemin = axes) Position
Understanding Cisco Cybersecurity Fundamentals
210-250 Understanding Cisco Cybersecurity Fundamentals NWExam.com SUCCESS GUIDE TO CISCO CERTIFICATION Exam Summary Syllabus Questions Table of Contents Introduction to 210-250 Exam on Understanding Cisco
IPassan Installation guide
IPassan Installation guide 1 Content 1 Overview... 3 1.1 Features... 3 1.2 Hardware... 3 1.2.1 s... 3 1.2.2 Extra modules... 5 1.3 IPassan manager... 7 2 Installation... 7 2.1... 8 2.1.1 Power supply...
Memory Hole in Large Memory X86 Based Systems
Memory Hole in Large Memory X86 Based Systems By XES Product Development Team http://www.sun.com/desktop/products Wednesday, May 19, 2004 1 Copyright 2004 Sun Microsystems, Inc. 4150 Network Circle, Santa
Design and Performance of the OpenBSD Stateful Packet Filter (pf)
Usenix 2002 p.1/22 Design and Performance of the OpenBSD Stateful Packet Filter (pf) Daniel Hartmeier dhartmei@openbsd.org Systor AG Usenix 2002 p.2/22 Introduction part of a firewall, working on IP packet
CONTENTS IN DETAIL ACKNOWLEDGMENTS INTRODUCTION 1 PACKET ANALYSIS AND NETWORK BASICS 1 2 TAPPING INTO THE WIRE 17 3 INTRODUCTION TO WIRESHARK 35
CONTENTS IN DETAIL ACKNOWLEDGMENTS xv INTRODUCTION xvii Why This Book?...xvii Concepts and Approach...xviii How to Use This Book... xix About the Sample Capture Files... xx The Rural Technology Fund...
AURA ACADEMY Training With Expertised Faculty Call Us On For Free Demo
ETHICAL HACKING (CEH) CURRICULUM Introduction to Ethical Hacking What is Hacking? Who is a Hacker? Skills of a Hacker? Types of Hackers? What are the Ethics and Legality?? Who are at the risk of Hacking
Sage Simple Comptable Guide
Sage Simple Comptable Guide If searching for the ebook Sage simple comptable guide in pdf form, in that case you come on to the right website. We presented complete variant of this ebook in epub, DjVu,
CounterACT DHCP Classifier Plugin
CounterACT DHCP Classifier Plugin Version 2.0.7 and Above Table of Contents About the CounterACT DHCP Classifier Plugin... 3 What to Do... 3 Requirements... 4 Install the Plugin... 4 Concepts, Components,