Network Security. @straightouttabandwidth-blog - Tumblr Blog

4 Problems with WEP

1) WEP uses 40-bit encryption keys. These keys can be cracked ridiculously fast. A lot of people don’t change the keys regularly either..

2) WEP authentication protocol relies on DNS. This means that it’s prone to MITM attacks. Speaking of attacks, Networks using WEP keys are vulnerable to: -Active/Passive attacks to decrypt traffic. -Active attacks to inject new traffic from unauthorized mobile stations. -Dictionary-building attacks.

3) The initialization vector in WEP is a 24-bit field, which is sent as the cleartext part of a message. This guarantees the reuse of the same key stream. On a busy access point that sends [1500 byte packets @ 10Mbps], after about 5 hours, the same key stream will be reused and so, this allows an attacker to collect two ciphertexts that are encrypted with the same key stream and perform statistical attacks to recover the plaintext.

4) Here’s a simple one: Having a WEP key ‘protecting’ your network creates a false sense of security... thus clients may send sensitive data over this network.

“Today, all your academic records are stored on computers. Universities and colleges store all their students’ records, research, and coursework in their computers. Normally hackers don’t take a vacation, but, during the months of September to May College networks see a rise in attacks to their networks. Therefore, with the rise in attacks by hackers colleges need to readdress their network security for protecting their critical information. “

Click to read more

I am referring to confidentiality not integrity. are there any security features that UDP lack compared to TCP? According to this paragraph While TACACS uses UDP port 49, TACACS+ uses TCP port...

Is TCP more secure than UDP?

NTP amplification fuelling era of super-massive DDoS

“ Some time in December 2014 an unnamed ISP experienced an NTP reflection DDoS attack that peaked at a router-straining 400Gbps, easily the largest denial of service event in Internet history, Arbor Networks' 10th Annual Infrastructure Report has revealed. “

Click to read more

Cloud computing causes a number of security concerns.

Firstly, you're relying on this company to protect your data. It's not guaranteed that your data doesn't fall into the hands of outside agencies such as the NSA as companies such as Google say that they have no problem handing over data to these agencies but i digress..

Secondly and more to the point of this blog, you can be attacked when transferring data and have the security of your data compromised.

Aaand finally, if your account is compromised, so is your data.

Click to read more.

Misconfigured DNS servers may be used in DDoS attacks.

A Domain Name Server (DNS) amplification attack is a popular form of distributed denial of service (DDoS) that relies on the use of publically accessible open DNS servers to overwhelm a victim system with DNS response traffic.

Click to read more.

Hackers in London have created a drone that can spoof WiFi networks in order to steal smartphone data. The hacker drones exploit the way smartphones remember WiFi networks they've connected to in the past. The creators of the drone are ethical hackers, though, and will report their findings next week at the Black Hat Asia conference in Singapore.

“ Hackers in London have been testing out drones that can plunder information from WiFi-enabled smartphones. Built on an innocuous-sounding technology called Snoopy, the hacker drones spoof WiFi networks in order to steal user data. But don't go and switch off your phone's WiFi quite yet: the hacker drones are part of a research project, the findings of which will be presented in Singapore at next week's Black Hat Asia conference.

The hacker drone works by exploiting "remembered" WiFi networks on smartphones. When a smartphone connects to a WiFi network at Starbucks, for instance, the phone remembers that the network is safe to join, and will automatically connect to the Starbucks WiFi next time

Rather than joining the Starbucks network, though, the smartphone is actually joining a spoofed Starbucks network, courtesy of the hacker drone. At that point, any data the smartphone sends--passwords, usernames, credit card info--can be read by the hacker drone.. and the hackers.”

Click to read more.

Botnets and their masters can communicate with each other by calling into the same VoIP conference call and swapping data using touch tones, researchers demonstrated at Defcon.

VoIP botnet control

“Botmasters can use VoIP conference calls to communicate with the zombie machines in their botnets, researchers Itzik Kotler and Iftach Ian Amit of security and risk-assessment firm Security Art demonstrated at Defcon. They released a tool called Moshi Moshi that converts touchtones into commands the bots can understand and turns text into speech to capture information on compromised corporate computers and read it into voicemail for the botmaster to pick up later. The techniques enable botmasters to control their hijacked machines from wireless phones and even payphones (if they can find one). The botmasters call in to the conference bridge, the zombies connect via the corporate network and data can flow, the researchers showed”

Click to read more.

By DEFCON - HackersSecurity Note: Red Team USA by no means condones or promotes any criminal activity - the showing of this video is for informational purpos...

This shows just how easy it is to get into an office network....through the printer

Speakers: Randal Vaughn, Professor, Informatio Systems, Baylor University Gadi Evron Abstract: This paper outlines a Distributed Denial of Service (DDoS) att...

Really informative presentation on DNS Amplification Attacks.

Check out this Black Hat 2013 presentation. Matthew Prince explains how Spamhaus(aided by Cloudflare) survived a 300Gbps DNS Amplification attack(DDoS).

#Network #Security #Spamhaus #2013

openresolverproject.org

Want to make sure your network isn’t involved in DNS Amplification attacks if you’re running a DNS server? Use this tool to check if you’re running an Open DNS Resolver.

If you are running an Open DNS Resolver, It means that your DNS Server will be answering recursive queries from hosts outside of its domain.

I’ll explain DNS Amplification attacks more in a future post.

#OpenResolverProject #OpenDNS #Network #Security

Trending Blogs

Recently Viewed Blogs

Network Security.