Paparazzi over IP. Daniel Mende & Pascal Turbing {dmende
|
|
|
- Roland Powers
- 6 years ago
- Views:
Transcription
1 Paparazzi over IP Daniel Mende & Pascal Turbing {dmende
2 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #2 Who we are Old-school network geeks, working as security researchers for Germany based ERNW GmbH Independent Deep technical knowledge Structured (assessment) approach Business reasonable recommendations We understand corporate Blog: on Twitter
3 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #3 Agenda Intro Transport Protocols Communication Modes & Attacks Conclusions
4 Intro A number of current high-end cameras have network interfaces. We did some research as for their security and potential attack paths. In the following we focus on Canons new flagship EOS 1D X, but similar problems might be found in other models, of other vendors, too. 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #4
5 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #5 The Camera Canon EOS-1D X
6 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #6 The Camera A Bit of Marketing From Canon USA: A built in Ethernet port allows for fast, easy transfer of images directly to a PC or via a network to clients from live events. The EOS-1D X is compatible with the new WFT-E6A Wireless File Transmitter for wireless LAN transfer with the IEEE a/b/g/n standards.
7 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #7 The Camera The Ethernet Port
8 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #8 The Camera WLAN Adapter
9 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #9 The Target aka. Mr. Reuters
10 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #10 The Target What if One could get the real, unedited images first. One could upload (bad) images. One could turn the camera into a surveillance device.
11 Transport The underlying Protocols
12 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #12 Transport Wired LAN via built-in Ethernet port or Wireless LAN via WFT-E6A. Standard TCP/IP (no IPv6, yet).
13 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #13 Traditional Attacks Layer 2 ARP-spoofing possible. No sticky ARP entries ARP-flooding with ~100 packets per second DoS the network stack.
14 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #14 Traditional Attacks Layer 3/4 TCP/IP is used for all network communication. Established connections can be killed via TCP-RST.
15 Communication Modes
16 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #16 Communication Modes Overview FTP Upload Mode DLNA Built-in webserver EOS Utility
17 FTP Upload Mode
18 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #18 FTP Upload Mode Mode of operation Target server and credentials configured on camera. Photos taken are uploaded to the server immediately.
19 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #19 FTP Upload Mode Downside As FTP is clear text, credentials can be sniffed. As well as the complete data transmission Uploaded pictures can be extracted from network traffic.
20 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #20 FTP Upload Mode troopers troopers troopers troopers
21 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #21 FTP Upload Mode troopers troopers troopers
22 DLNA mode
23 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #23 DLNA mode Overview Digital Living Network Alliance UPnP used for discovery. DLNA guidelines for file formats, encodings, resolutions. HTTP and XML used to access media.
24 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #24 DLNA mode Cons No authentication. No restrictions. Every DLNA client can download _all_ images. Your Browser could be a DLNA client. Or somebody else's browser. For your camera.
25 Built-in webserver Always a good idea
26 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #26 Built-in webserver Canon WFT Server Wireless File Transmitter Server Mode. Canon USA: Use a web browser to capture, view and download images remotely
27 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #27 Built-in webserver Canon WFT Server Browser interface uses AJAX. Embedded webserver only capable of HTTP GET method. Every other request method is answered with a 404.
28 Built-in webserver Authentication Authentication via HTTP Basic (RFC 2617) on login page. Session cookie is used afterwards. Cookie looks like sessionid=40b1 4 (!!!) byte Session ID possible IDs 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #28
29 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #29 Built-in webserver Session ID Brute force implemented in 6 lines of python. To check for all possible IDs takes about 20 minutes. Embedded Webserver is not that responsive.
30 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #30 import requests target_uri = ' target_string = 'SESSION_ERR' for i in xrange(0xffff): if (i!= 0 and i%1000 == 0): print str(i) + 'IDs checked' r = requests.get(target_uri, cookies={'sessionid': '%x' %i}) if r.text.find(target_string) == -1: print 'SessionID is : sessionid=%x' %i break
31 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #31
32 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #32 Built-in webserver recap Full access to Live View, stored photos and camera settings. You surf We brute.
33 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #33 Built-in webserver Requirements Camera in WFT Server mode. Valid session opened by user. Some minutes of time.
34 EOS Utility mode aka. I wanna be root
35 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #35 EOS Utility mode The Utility
36 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #36 EOS Utility mode The Utility
37 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #37 EOS Utility mode Overview Allows remote control of all nonmanual camera functions. Pictures can be up- and downloaded. Possibly even more (sound recording anyone?)
38 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #38 EOS Utility mode Technical SSDP and MDNS used for discovery. PTP/IP used for communication. Needs initial camera <-> software pairing.
39 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #39 EOS Utility mode Pairing At first use, credentials needs to be exchanged between the camera and the client software. Camera must be put into pairing mode via camera menu. Camera signals the need for pairing via MDNS.
40 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #40
41 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #41 EOS Utility mode Pairing
42 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #42 EOS Utility mode Pairing Client software connects to camera via PTP/IP. PTP/IP Authentication is successful regardless of the credentials. Credentials (hostname, GUID) are stored on the camera.
43 PTP/IP Feels like USBoIP )-:
44 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #44 PTP/IP Picture Transfer Protocol over Internet Protocol. ISO Standardized by International Imaging Industry Association
45 PTP/IP Packet format Wrapper for PTP with header: 4 byte length (little endian) 4 byte type (little endian) data 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #45
46 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #46 PTP/IP Layering
47 PTP/IP Authentication PTPIP_INIT_COMMAND_REQUEST Includes authentication data: 16 byte GUID hostname string 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #47
48 PTPIP_INIT_COMMAND_REQUEST 2a eb 7a 78 9d 69 cb 64 4e a3 e0 fc 96 ef Paket length = 42 byte Paket type = 0x01 = PTPIP_INIT_COMMAND_REQUEST GUID Hostname = utf16 Trailer 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #48
49 The Attack aka. gottcha
50 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #55 Attack Getting the Credentials Client Hostname easy discoverable, but not needed. Camera also excepts connections with a different hostname. GUID unknown to client software. Obfuscated GUID is broadcasted by the cam via UPNP.
51 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #56
52 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #57 tmp = mdns_info.getproperties()['tid.canon.com'].split('-') guid = [] l = lambda s: [ s[i:i+2:] for i in xrange(0,len(s),2) ][::-1] for i in xrange(0,3): guid += l(tmp[i]) guid += tmp[3] guid += tmp[4] guid = "".join(guid) guid = eb7a789d69cb644ea3e0fc96ef597942
53 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #58 The Attack Connecting to the Camera Camera only allows one connection. Already connected client needs to be disconnected. TCP-RST the established PTP/IP connection.
54 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #59 Attack Process Listen for the Cam on MDNS. De-obfuscate Authentication data. Disconnect connected Client Software. Connect via PTP/IP. Have Phun (-;
55 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #60
56 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #61 Attack outlined So you can write it down Photograph uses hotel / Starbucks WLAN, which isn t unlikely during events (think of CEBIT few days ago). Almost anybody in the same LAN can download the images from the camera (and even more).
57 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #62 Countermeasures Enable network functionality only in trusted Networks. Use WPA and a secure passphrase for (your trusted) WLAN.
58 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #63 Conclusions High-end cameras are yet another daily life item equipped with networking capabilities incl. full-blown IP stacks. Once more, their device-specific network technologies have been designed and implemented without (too much) security in mind. Again, this leads to (classes of) attacks previously unknown to their nonnetworked counterparts.
59 Next Steps New series of cameras (EOS 6D) Built-in Wireless Access Point New communication protocol for IOS/Android App 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #64
60 3/14/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #65 There s never enough time THANK YOU...for yours!
61 ERNW GmbH Breslauer Str. 28 D Questions?
Evasion of High-End IDPS Devices in the Age of IPv6
Evasion of High-End IDPS Devices in the Age of IPv6 Antonios Atlasis Enno Rey secfu.net aatlasis@secfu.net ERNW GmbH erey@ernw.de 06/08/14 ERNW GmbH Carl-Bosch-Str. 4 D- 69115 Heidelberg #2 Who We Are
VMDK Has Left the Building
VMDK Has Left the Building Attacking VMware-Based Cloud Infrastructures Hendrik Schmidt & Pascal Turbing {hschmidt, pturbing}@ernw.de 11/30/2012 ERNW GmbH Carl-Bosch-Str. 4 D-69115 Heidelberg #2 Who we
Evasion of High-End IDPS Devices at the IPv6 Era
Evasion of High-End IDPS Devices at the Era Antonios Atlasis Enno Rey Rafael Schaefer secfu.net aatlasis@secfu.net ERNW GmbH erey@ernw.de ERNW GmbH rschaefer@ernw.de #2 Who We Are Enno Rey Old school network
CIT 380: Securing Computer Systems. Network Security Concepts
CIT 380: Securing Computer Systems Network Security Concepts Topics 1. Protocols and Layers 2. Layer 2 Network Concepts 3. MAC Spoofing 4. ARP 5. ARP Spoofing 6. Network Sniffing Protocols A protocol defines
Chapter 3: Network Protocols and Communications
Chapter 3: Network Protocols and Communications Introduction to Networks Intro to Networks v5 Message Delivery Options IPv4 Unicast One-to-One Multicast One-to-Many Broadcast One-to-All IPv6 Unicast One-to-One
IPv6 in Virtualized Data Centers
IPv6 in Virtualized Data Centers Christopher Werny, cwerny@ernw.de Enno Rey, erey@ernw.de 15.06.2015 ERNW GmbH Carl-Bosch-Straße 4 D-69115 Heidelberg #2 Who We Are Network (IPv6) geeks, working for Germany
Introduction to Computer Networks. CS 166: Introduction to Computer Systems Security
Introduction to Computer Networks CS 166: Introduction to Computer Systems Security Network Communication Communication in modern networks is characterized by the following fundamental principles Packet
3.2 COMMUNICATION AND INTERNET TECHNOLOGIES
3.2 COMMUNICATION AND INTERNET TECHNOLOGIES 3.2.1 PROTOCOLS PROTOCOL Protocol a set of rules governing the way that devices communicate with each other. With networks and the Internet, we need to allow
Network Reference Models
Network Reference Models LECTURE (2) Network Reference Models A framework (guideline) for network implementation and troubleshooting. Divides complex functions into simpler components. Importance of reference
Lab 1: Packet Sniffing and Wireshark
Lab 1: Packet Sniffing and Wireshark Fengwei Zhang Wayne State University Course: Cyber Security Practice 1 Packet Sniffer Packet sniffer is a basic tool for observing network packet exchanges in a computer
Lecture 6. Internet Security: How the Internet works and some basic vulnerabilities. Thursday 19/11/2015
Lecture 6 Internet Security: How the Internet works and some basic vulnerabilities Thursday 19/11/2015 Agenda Internet Infrastructure: Review Basic Security Problems Security Issues in Routing Internet
Lecture 12. Application Layer. Application Layer 1
Lecture 12 Application Layer Application Layer 1 Agenda The Application Layer (continue) Web and HTTP HTTP Cookies Web Caches Simple Introduction to Network Security Various actions by network attackers
VMDK Has Left the Building
VMDK Has Left the Building Attacking VMware-Based Cloud Infrastructures Matthias Luft mluft@ernw.de 10/23/13 ERNW GmbH Carl-Bosch-Str. 4 D-69115 Heidelberg #2 Who we are Old-school network geeks, working
Link download full: Test Bank for Business Data Networks and Security 9th Edition by Panko https://digitalcontentmarket.org/download/business-data-networks-and-security-9thedition-by-panko/ Business Data
Network Security. Thierry Sans
Network Security Thierry Sans HTTP SMTP DNS BGP The Protocol Stack Application TCP UDP Transport IPv4 IPv6 ICMP Network ARP Link Ethernet WiFi The attacker is capable of confidentiality integrity availability
Chapter 3: Network Protocols and Communications CCENT Routing and Switching Introduction to Networks v6.0 Instructor Planning Guide
Chapter 3: Network Protocols and Communications CCENT Routing and Switching Introduction to Networks v6.0 Instructor Planning Guide CCNET v6 1 Chapter 3: Network Protocols and Communications CCENT Routing
ELEC5616 COMPUTER & NETWORK SECURITY
ELEC5616 COMPUTER & NETWORK SECURITY Lecture 17: Network Protocols I IP The Internet Protocol (IP) is a stateless protocol that is used to send packets from one machine to another using 32- bit addresses
Chapter 8 roadmap. Network Security
Chapter 8 roadmap 8.1 What is network security? 8.2 Principles of cryptography 8.3 Message integrity 8.4 Securing e-mail 8.5 Securing TCP connections: SSL 8.6 Network layer security: IPsec 8.7 Securing
SC/CSE 3213 Winter Sebastian Magierowski York University CSE 3213, W13 L8: TCP/IP. Outline. Forwarding over network and data link layers
SC/CSE 3213 Winter 2013 L8: TCP/IP Overview Sebastian Magierowski York University 1 Outline TCP/IP Reference Model A set of protocols for internetworking The basis of the modern IP Datagram Exchange Examples
ENEE 457: Computer Systems Security 11/07/16. Lecture 18 Computer Networking Basics
ENEE 457: Computer Systems Security 11/07/16 Lecture 18 Computer Networking Basics Charalampos (Babis) Papamanthou Department of Electrical and Computer Engineering University of Maryland, College Park
AN TOÀN LỚP 4: TCP/IP ATTACKS NGUYEN HONG SON PTITHCM
1 AN TOÀN LỚP 4: TCP/IP ATTACKS NGUYEN HONG SON PTITHCM 2 Introduction (1/2) TCP provides a full duplex reliable stream connection between two end points A connection is uniquely defined by the quadruple
Once all of the features of Intel Active Management Technology (Intel
Chapter11 Connecting and Communicating with Intel Active Management Technology Disconnecting from change does not recapture the past. It loses the future. Kathleen Norris, O Magazine, January 2004 Once
Networking Models OSI Model Created by International Organization Standardization
Networking Models OSI Model Created by International Organization Standardization Prepared by Agha Mohammad Haidari Network Manager ICT Directorate Ministry of Communication & IT Email : Agha.m@mcit.gov.af
Business Data Networks and Security 10th Edition by Panko Test Bank
Business Data Networks and Security 10th Edition by Panko Test Bank Chapter 2 Network Standards 1) Internet standards are published as. A) RFCs B) IETFs C) TCP/IPs D) Internet Protocols Question: 1a Objective:
Introduction to computer networking
edge core Introduction to computer networking Comp Sci 3600 Security Outline edge core 1 2 edge 3 core 4 5 6 The edge core Outline edge core 1 2 edge 3 core 4 5 6 edge core Billions of connected computing
Chapter 2 Communicating Over the Network
Chapter 2 Communicating Over the Network Elements of Communication Communicating the Messages Continuous stream of bits 00101010100101010101010101010101010 I have to wait Single communications (e.g. video,
ICS 351: Networking Protocols
ICS 351: Networking Protocols IP packet forwarding application layer: DNS, HTTP transport layer: TCP and UDP network layer: IP, ICMP, ARP data-link layer: Ethernet, WiFi 1 Networking concepts each protocol
System Programming. Introduction to computer networks
Content : by Dr. B. Boufama School of Computer Science University of Windsor Instructor: Dr. A. Habed adlane@cs.uwindsor.ca http://cs.uwindsor.ca/ adlane/60-256 Content Content 1 Introduction to Computer
Computer Networks Security: intro. CS Computer Systems Security
Computer Networks Security: intro CS 166 - Computer Systems Security A very easy network 3/14/16 Computer Networks: Intro 2 Two philosophers example Translator Language Translator Engineer Communication
All your packets are belong to us Attacking backbone technologies
All your packets are belong to us Attacking backbone technologies Daniel Mende & Enno Rey {dmende, erey}@ernw.de Who we are Old-school network geeks. Working as security researchers for Germany based ERNW
Worldwide Release. Your world, Secured ND-IM005. Wi-Fi Interception System
Your world, Secured 2016 Worldwide Release System Overview Wi-Fi interception system is developed for police operations and searching of information leaks in the office premises, government agencies and
AN INTRODUCTION TO ARP SPOOFING
AN INTRODUCTION TO ARP SPOOFING April, 2001 Sean Whalen Sophie Engle Dominic Romeo GENERAL INFORMATION Introduction to ARP Spoofing (April 2001) Current Revision: 1.8 Available: http://chocobospore.org
Network+ Guide to Networks, 6 th Edition. Chapter 2 Solutions
Network+ Guide to Networks, 6 th Edition Solutions 2 1 Network+ Guide to Networks, 6 th Edition Chapter 2 Solutions Review Questions 1. Your supervisor has asked you to correct several cable management
Lecture 2: Internet Architecture
CS 3700 Networks and Distributed Systems Lecture 2: Internet Architecture Revised 1/6/14 Organizing Network Functionality 2 Organizing Network Functionality 2 Networks are built from many components! Networking
Exercises: Basics of Networking II Experiential Learning Workshop
Exercises: Basics of Networking II Experiential Learning Workshop 1 General Guidelines 1. Make a team of two or three unless stated otherwise. 2. For each exercise, use wireshark capture to verify contents
E&CE 358: Tutorial 1. Instructor: Sherman (Xuemin) Shen TA: Miao Wang
E&CE 358: Tutorial 1 Instructor: Sherman (Xuemin) Shen TA: Miao Wang Email: m59wang@uwaterloo.ca 1 About Tutorials TA: Miao Wang Office: EIT 3133; Tutorials: Th 4:30 5:20 pm Topics Supplementary knowledge
Protocol Layers, Security Sec: Application Layer: Sec 2.1 Prof Lina Battestilli Fall 2017
CSC 401 Data and Computer Communications Networks Protocol Layers, Security Sec:1.5-1.6 Application Layer: Sec 2.1 Prof Lina Battestilli Fall 2017 Outline Computer Networks and the Internet (Ch 1) 1.1
Copyleft 2005, Binnur Kurt. Objectives
1 ing Fundamentals Copyleft 2005, Binnur Kurt Objectives Define basic networking terms Describe some commonly used network applications Describe the main purposes and functions of computer networking Describe
Network Encryption 3 4/20/17
The Network Layer Network Encryption 3 CSC362, Information Security most of the security mechanisms we have surveyed were developed for application- specific needs electronic mail: PGP, S/MIME client/server
Step-by-Step Setup Guide Wireless File Transmitter
EOS Step-by-Step Setup Guide Wireless File Transmitter Server Mode Infrastructure & Ad Hoc Networks Windows XP / Windows 7 2012 Canon U.S.A., Inc. All Rights Reserved. Reproduction in whole or in part
CS Paul Krzyzanowski
The Internet Packet switching: store-and-forward routing across multiple physical networks... across multiple organizations Computer Security 11. Network Security ISP Paul Krzyzanowski Rutgers University
Bank Infrastructure - Video - 1
Bank Infrastructure - 1 05/09/2017 Threats Threat Source Risk Status Date Created Account Footprinting Web Browser Targeted Malware Web Browser Man in the browser Web Browser Identity Spoofing - Impersonation
Computer Security. 11. Network Security. Paul Krzyzanowski. Rutgers University. Spring 2018
Computer Security 11. Network Security Paul Krzyzanowski Rutgers University Spring 2018 April 15, 2018 CS 419 2018 Paul Krzyzanowski 1 The Internet Packet switching: store-and-forward routing across multiple
Scribe Notes -- October 31st, 2017
Scribe Notes -- October 31st, 2017 TCP/IP Protocol Suite Most popular protocol but was designed with fault tolerance in mind, not security. Consequences of this: People realized that errors in transmission
exam. Number: Passing Score: 800 Time Limit: 120 min CISCO Interconnecting Cisco Networking Devices Part 1 (ICND)
100-105.exam Number: 100-105 Passing Score: 800 Time Limit: 120 min CISCO 100-105 Interconnecting Cisco Networking Devices Part 1 (ICND) Exam A QUESTION 1 Which route source code represents the routing
Networking midterm. 5. As a data unit moves up from one protocol layer to another, control headers are:
Networking midterm 1. A protocol is a set of conventionally agreed rules that specify how data is to be exchanged between pairs of programs or devices. 2. The primary function of the Internet Protocol
Cisco EXAM CCNA Cisco Certified Network Associate. Buy Full Product.
Cisco EXAM - 200-120 CCNA Cisco Certified Network Associate Buy Full Product http://www.examskey.com/200-120.html Examskey Cisco 200-120 exam demo product is here for you to test the quality of the product.
Cisco Cisco Certified Network Associate (CCNA)
Cisco 200-125 Cisco Certified Network Associate (CCNA) http://killexams.com/pass4sure/exam-detail/200-125 Question: 769 Refer to exhibit: Which destination addresses will be used by Host A to send data
Networking interview questions
Networking interview questions What is LAN? LAN is a computer network that spans a relatively small area. Most LANs are confined to a single building or group of buildings. However, one LAN can be connected
CSC Network Security
CSC 474 -- Security Topic 9. Firewalls CSC 474 Dr. Peng Ning 1 Outline Overview of Firewalls Filtering Firewalls Proxy Servers CSC 474 Dr. Peng Ning 2 Overview of Firewalls CSC 474 Dr. Peng Ning 3 1 Internet
CCNA 1 Chapter 7 v5.0 Exam Answers 2013
CCNA 1 Chapter 7 v5.0 Exam Answers 2013 1 A PC is downloading a large file from a server. The TCP window is 1000 bytes. The server is sending the file using 100-byte segments. How many segments will the
1. What is a network protocol and why are protocols needed when two machines communicate? 2 marks
Topic1: Common Network Protocols 1. What is a network protocol and why are protocols needed when two machines communicate? 2. Describe the function of each of the following protocols: a. SMTP b. HTTP c.
Chapter 2 Layer Architecture of Network Protocols. School of Info. Sci. & Eng. Shandong Univ.
Chapter 2 Architecture of Network Protocols School of Info. Sci. & Eng. Shandong Univ. Outline 2.1 Examples of ing 2.2 OSI Reference Model (Continued from last time) 2.3. TCP/IP Architecture 2.4 Berkeley
Introduction and Overview Socket Programming Lower-level stuff Higher-level interfaces Security. Network Programming. Samuli Sorvakko/Nixu Oy
Network Programming Samuli Sorvakko/Nixu Oy Telecommunications software and Multimedia Laboratory T-110.4100 Computer Networks October 5, 2009 Agenda 1 Introduction and Overview 2 Socket Programming 3
Security SSID Selection: Broadcast SSID:
69 Security SSID Selection: Broadcast SSID: WMM: Encryption: Select the SSID that the security settings will apply to. If Disabled, then the device will not be broadcasting the SSID. Therefore it will
Network Policy Controller UAM/RADIUS Guide
Network Policy Controller UAM/RADIUS Guide 1. Introduction... 3 1.1. Terminology... 3 2. Web Authentication... 5 2.1. Redirect URL Parameters... 5 2.2. UAM Login URL... 5 2.3. UAM Logout URL... 6 3. UAM/RADIUS
Chapter 16 Networking
Chapter 16 Networking Outline 16.1 Introduction 16.2 Network Topology 16.3 Network Types 16.4 TCP/IP Protocol Stack 16.5 Application Layer 16.5.1 Hypertext Transfer Protocol (HTTP) 16.5.2 File Transfer
Vendor: Microsoft. Exam Code: Exam Name: MTA Security Fundamentals Practice Test. Version: Demo
Vendor: Microsoft Exam Code: 98-367 Exam Name: MTA Security Fundamentals Practice Test Version: Demo DEMO QUESTION 1 To prevent users from copying data to removable media, you should: A. Lock the computer
CSC 574 Computer and Network Security. TCP/IP Security
CSC 574 Computer and Network Security TCP/IP Security Alexandros Kapravelos kapravelos@ncsu.edu (Derived from slides by Will Enck and Micah Sherr) Network Stack, yet again Application Transport Network
Hacking Smart Home Devices. Fernando Gont
Hacking Smart Home Devices Fernando Gont About... Security Researcher and Consultant at SI6 Networks Published: 30 IETF RFCs 10+ active IETF Internet-Drafts Author of the SI6 Networks' IPv6 toolkit https://www.si6networks.com/tools/ipv6toolkit
Hacking TP-Link Devices. Fernando Gont
Hacking TP-Link Devices Fernando Gont About... Security Researcher and Consultant at SI6 Networks Published: 30 IETF RFCs 10+ active IETF Internet-Drafts Author of the SI6 Networks' IPv6 toolkit https://www.si6networks.com/tools/ipv6toolkit
Configuring your VLAN. Presented by Gregory Laffoon
Configuring your VLAN Presented by Gregory Laffoon 1 Overview of Networking Terms Networking Terms Overview OSI Model Defines a networking framework for implementing protocols in seven layers Control is
Communications Software. CSE 123b. CSE 123b. Spring Lecture 10: Mobile Networking. Stefan Savage
CSE 123b CSE 123b Communications Software Spring 2003 Lecture 10: Mobile Networking Stefan Savage Quick announcement My office hours tomorrow are moved to 12pm May 6, 2003 CSE 123b -- Lecture 10 Mobile
Quick announcement. CSE 123b Communications Software. Last class. Today s issues. The Mobility Problem. Problems. Spring 2003
CSE 123b Communications Software Quick announcement My office hours tomorrow are moved to 12pm Spring 2003 Lecture 10: Mobile Networking Stefan Savage May 6, 2003 CSE 123b -- Lecture 10 Mobile IP 2 Last
Chapter 2. Communicating Over The Network. CCNA1-1 Chapter 2
Chapter 2 Communicating Over The Network CCNA1-1 Chapter 2 Communicating Over the Network The Platform for Communications CCNA1-2 Chapter 2 Elements of Communication People communicate in many different
Certified Penetration Testing Consultant
Certified Penetration Testing Consultant Duration: 4 Days Language: English Course Delivery: Classroom COURSE BENEFITS The vendor neutral Certified Penetration Testing Consultant course is designed for
TCP/IP Networking. Training Details. About Training. About Training. What You'll Learn. Training Time : 9 Hours. Capacity : 12
TCP/IP Networking Training Details Training Time : 9 Hours Capacity : 12 Prerequisites : There are no prerequisites for this course. About Training About Training TCP/IP is the globally accepted group
NETWORK PACKET ANALYSIS PROGRAM
NETWORK PACKET ANALYSIS PROGRAM Duration: 3 days (21 hours) Mode: 1. Instructor Led Class room Training and Labs 2. Online In this hands-on course, you will receive in-depth training on Protocol analysis
(Trusting ;-) Unauthenticated Protocols
(Trusting ;-) Unauthenticated Protocols An 2012 Overview of the Reality in Corporate Environments Motivation What we see out there Almost all (corporate) environments we know - operate networks relying
INTERNET SAFETY IS IMPORTANT
INTERNET SAFETY IS IMPORTANT Internet safety is not just the ability to avoid dangerous websites, scams, or hacking. It s the idea that knowledge of how the internet works is just as important as being
Genie Snoop lab. Laboration in data communication GenieLab Department of Information Technology, Uppsala University
Genie Snoop lab Laboration in data communication GenieLab Department of Information Technology, Uppsala University Overview This lab deals with network layers, services and HTTP transactions as well as
CYBER ATTACKS EXPLAINED: WIRELESS ATTACKS
CYBER ATTACKS EXPLAINED: WIRELESS ATTACKS Wireless networks are everywhere, from the home to corporate data centres. They make our lives easier by avoiding bulky cables and related problems. But with these
Data Communication & Computer Networks MCQ S
Data Communication & Computer Networks MCQ S 1. The translates internet domain and host names to IP address. a) domain name system b) routing information protocol c) network time protocol d) internet relay
Chapter 2. Communicating Over The Network
Chapter 2 Communicating Over The Network CCNA1-1 Chapter 2 Note for Instructors These presentations are the result of a collaboration among the instructors at St. Clair College in Windsor, Ontario. Thanks
OSI Layer OSI Name Units Implementation Description 7 Application Data PCs Network services such as file, print,
ANNEX B - Communications Protocol Overheads The OSI Model is a conceptual model that standardizes the functions of a telecommunication or computing system without regard of their underlying internal structure
B.Sc. (Hons.) Computer Science with Network Security B.Eng. (Hons) Telecommunications B.Sc. (Hons) Business Information Systems
B.Sc. (Hons.) Computer Science with Network Security B.Eng. (Hons) Telecommunications B.Sc. (Hons) Business Information Systems Bridge BTEL/PT BCNS/14/FT BIS/14/FT BTEL/14/FT Examinations for 2014-2015
CSE 123A Computer Netwrking
CSE 123A Computer Netwrking Winter 2005 Mobile Networking Alex Snoeren presenting in lieu of Stefan Savage Today s s issues What are implications of hosts that move? Remember routing? It doesn t work anymore
Stylitis-10+ WiFi Setup
Stylitis-10+ WiFi Setup In order for Stylitis-10+WiFi to operate, it must be connected to an access point. The WiFi module has a default IP: 169.254.228.4. In order for it to be in the same sub-network
CSC 4900 Computer Networks: Security Protocols (2)
CSC 4900 Computer Networks: Security Protocols (2) Professor Henry Carter Fall 2017 Chapter 8 roadmap 8.1 What is network security? 8.2 Principles of cryptography 8.3 Message Integrity 8.4 End point Authentication
PIG: Finding Truffles Without Leaving A Trace. Ryan Linn DEFCON 19
PIG: Finding Truffles Without Leaving A Trace Ryan Linn DEFCON 19 Overview Introduction Why are we here? How will this help me? Talking is boring show me That s neat, how does this work? Protocols and
ch02 True/False Indicate whether the statement is true or false.
ch02 True/False Indicate whether the statement is true or false. 1. No matter what medium connects computers on a network copper wires, fiber-optic cables, or a wireless setup the same protocol must be
Internet Layers. Physical Layer. Application. Application. Transport. Transport. Network. Network. Network. Network. Link. Link. Link.
Internet Layers Application Application Transport Transport Network Network Network Network Link Link Link Link Ethernet Fiber Optics Physical Layer Wi-Fi ARP requests and responses IP: 192.168.1.1 MAC:
network security s642 computer security adam everspaugh
network security s642 adam everspaugh ace@cs.wisc.edu computer security today Announcement: HW3 to be released WiFi IP, TCP DoS, DDoS, prevention 802.11 (wifi) STA = station AP = access point BSS = basic
20-CS Cyber Defense Overview Fall, Network Basics
20-CS-5155 6055 Cyber Defense Overview Fall, 2017 Network Basics Who Are The Attackers? Hackers: do it for fun or to alert a sysadmin Criminals: do it for monetary gain Malicious insiders: ignores perimeter
CS4700/5700: Network fundamentals
Cristina Nita-Rotaru CS4700/5700: Network fundamentals. 1: Organizing network functionality } Networks are built from many components } Networking technologies } Ethernet, Wifi, Bluetooth, Fiber Optic,
Web 2.0 and AJAX Security. OWASP Montgomery. August 21 st, 2007
Web 2.0 and AJAX Security OWASP Montgomery August 21 st, 2007 Overview Introduction Definition of Web 2.0 Basics of AJAX Attack Vectors for AJAX Applications AJAX and Application Security Conclusions 1
Introduction and Overview Socket Programming Higher-level interfaces Final thoughts. Network Programming. Samuli Sorvakko/Nixu Oy
Network Programming Samuli Sorvakko/Nixu Oy Telecommunications software and Multimedia Laboratory T-110.4100 Computer Networks October 16, 2008 Agenda 1 Introduction and Overview Introduction 2 Socket
Lecture (03) Network Model
١ Lecture (03) Network Model By: Dr. Ahmed ElShafee Agenda Layering concept History Discovering the network layers Application Layer same layer interaction concept; Transport Layer Adjacent layer interaction
Network Model: Each layer has a specific function.
OBJECTIVES: To discuss the OSI model and its layer architecture and to show the interface between the layers. To briefly discuss the functions of each layer in the OSI model. To introduce the TCP/IP protocol.
Advanced Network Troubleshooting Using Wireshark (Hands-on)
Advanced Network Troubleshooting Using Wireshark (Hands-on) Description This course is a continuation of the "Basic Network Troubleshooting Using Wireshark" course, and comes to provide the participants
Section 4 Cracking Encryption and Authentication
Section 4 Cracking 802.11 Encryption and Authentication In the previous section we showed the vulnerabilities of Open Wireless LANs. In this section we ll show some of the techniques and tools used to
Introduction to Information Science and Technology 2017 Networking I. Sören Schwertfeger 师泽仁
I Sören Schwertfeger 师泽仁 Outline Internet History of the Internet Internet Structure Internet Protocols Network layer details 1. Physical Layer 2. Data Link Layer 3. Network Layer Internet: Huge network
Computer Communication & Networks / Data Communication & Computer Networks Week # 03
Computer Communication & Networks / Data Communication & Computer Networks Week # 03 M.Nadeem Akhtar CS & IT Department The University of Lahore Email: nadeem.akhtar@cs.uol.edu.pk URL-https://sites.google.com/site/nadeemuolcsccn/home
Layered Architecture
1 Layered Architecture Required reading: Kurose 1.7 CSE 4213, Fall 2006 Instructor: N. Vlajic Protocols and Standards 2 Entity any device capable of sending and receiving information over the Internet
Network Systems. Bibliography. Outline. General principles about Radius server. Radius Protocol
Bibliography General principles about Radius server Bibliography Network System Radius Protocol Claude Duvallet University of Le Havre Faculty of Sciences and Technology 25 rue Philippe Lebon - BP 540
Configuring the WT-4 for ftp (Ad-hoc Mode)
En Configuring the WT-4 for ftp (Ad-hoc Mode) Windows XP Introduction This document provides basic instructions on configuring the WT-4 wireless transmitter and a Windows XP Professional SP2 ftp server
VLANs and Association Redirection. Jon Ellch
802.11 VLANs and Association Redirection Jon Ellch Contents 1 Foreword 2 2 Background 3 3 Introduction 4 3.1 The state of the art......................................... 4 4 PVLANs and virtual BSSIDs
Securing Wireless Networks by By Joe Klemencic Mon. Apr
http://www.cymru.com/ Securing Wireless Networks by By Joe Klemencic (faz@home.com) Mon. Apr 30 2001 Many companies make attempts to embrace new technologies, but unfortunately, many of these new technologies
Lecture: Chapter 1, Introduction to Computer Data
IT220 Agenda & Assignments Lab Assignments MUST be signed off by your instructor for credit. Labs & Assignments submitted late are subject to penalties. Make sure you label each lab assignment with the
Video Streaming with the Stream Control Transmission Protocol (SCTP)
Chair for Network Architectures and Services Department of Informatics Technische Universität München Video Streaming with the Stream Control Transmission Protocol (SCTP) Lothar Braun, Andreas Müller Internet