ITX8063 2011 - Redigeerimiste ajalugu

Kasak: /* Topics */

2011-12-10T17:11:31Z

Topics

←Vanem redaktsioon		Redaktsioon: 10. detsember 2011, kell 19:11
157. rida:		157. rida:
	#* Defence: Switch port security, Dynamic ARP inspection and DHCP snooping, private VLANs, 802.1x		#* Defence: Switch port security, Dynamic ARP inspection and DHCP snooping, private VLANs, 802.1x
	# DNS Security		# DNS Security
	#* DNS tunneling		#* DNS tunneling. DNS rebinding. DNS cache poisoning (example: Kaminsky attack), DNS cache snooping, (Ab)using DNS in DoS amplification attacks
	#* DNS rebinding
	#* DNS cache snooping
	#* (Ab)using DNS in DoS amplification attacks
	#* DNSSEC: purpose and concept of operation		#* DNSSEC: purpose and concept of operation
	# Email Security		# Email Security

2011-12-10T17:10:32Z

Topics

←Vanem redaktsioon		Redaktsioon: 10. detsember 2011, kell 19:10
150. rida:		150. rida:
	#* Windows LM hash weaknesses.		#* Windows LM hash weaknesses.
	#* Rainbow tables.		#* Rainbow tables.
	#* Pass-the-hash (why and how does it work).		#* Pass-the-hash (why and how does it work).
			# Using BGP to attack Internet
			#* What is BGP. Attacks against BGP routing infra (flooding routers, attacking TCP sessions, hijacking IP prefixes, sending broken BGP messages). IPv6 impact on Internet security
	# Attacks and Defence of Network Infrastructure		# Attacks and Defence of Network Infrastructure
	#* Attacks: ARP protocol and ARP spoofing, MAC flooding, attacks against DHCP, fragmentation attacks, VLAN hopping		#* Attacks: ARP protocol and ARP spoofing, MAC flooding, attacks against DHCP, fragmentation attacks, VLAN hopping
167. rida:		169. rida:
	# Web Application Security		# Web Application Security
	#* Web application mapping		#* Web application mapping
			#* Session management
	#* Path traversal		#* Path traversal
	#* OS command injection		#* OS command injection

2011-12-10T17:05:38Z

Topics

←Vanem redaktsioon		Redaktsioon: 10. detsember 2011, kell 19:05
171. rida:		171. rida:
	#* Local and remote file inclusion (including null-byte poisoning, log poisoning)		#* Local and remote file inclusion (including null-byte poisoning, log poisoning)
	#* SQL injection		#* SQL injection
	#* Cross-Site Scripting (XSS):		#* Cross-Site Scripting (XSS): reflected and stored XSS, payloads, defence
	#*		#* Cross-Site Request Forgery: how does it work, defence

	== Results ==		== Results ==

	* [[ITX8063:2011:Results \| Results]]		* [[ITX8063:2011:Results \| Results]]

2011-12-10T17:02:07Z

Topics

@@ 154. rida: / 154. rida: @@
 #* Attacks: ARP protocol and ARP spoofing, MAC flooding, attacks against DHCP, fragmentation attacks, VLAN hopping
 #* Defence: Switch port security, Dynamic ARP inspection and DHCP snooping, private VLANs, 802.1x
+# DNS Security
 == Results ==
 * [[ITX8063:2011:Results | Results]]

2011-12-10T16:47:33Z

Topics

←Vanem redaktsioon		Redaktsioon: 10. detsember 2011, kell 18:47
152. rida:		152. rida:
	#* Pass-the-hash (why and how does it work).		#* Pass-the-hash (why and how does it work).
	# Attacks and Defence of Network Infrastructure		# Attacks and Defence of Network Infrastructure
	#*		#* Attacks: ARP protocol and ARP spoofing, MAC flooding, attacks against DHCP, fragmentation attacks, VLAN hopping
			#* Defence: Switch port security, Dynamic ARP inspection and DHCP snooping, private VLANs, 802.1x
			#

	== Results ==		== Results ==

	* [[ITX8063:2011:Results \| Results]]		* [[ITX8063:2011:Results \| Results]]

2011-12-10T16:40:57Z

Topics

←Vanem redaktsioon		Redaktsioon: 10. detsember 2011, kell 18:40
140. rida:		140. rida:
	# Network scanning and enumeration		# Network scanning and enumeration
	#* Phases of network scanning: host discovery, port scanning, service and application version detection, OS fingerprinting, vulnerability scanning		#* Phases of network scanning: host discovery, port scanning, service and application version detection, OS fingerprinting, vulnerability scanning
	#* Methods used for conducting different phases		#* Methods used for conducting different phases (how different protocols like ARP, ICMP, TCP and UDP are used for scanning)
	#* Network scanning in IPv6 networks		#* Network scanning in IPv6 networks
	#* Defences against scanning: detection, obscurity, deception (honeypots, tarpits, spidertraps)		#* Defences against scanning: detection, obscurity, deception (honeypots, tarpits, spidertraps)
146. rida:		146. rida:
	# Password Attacks		# Password Attacks
	#* Guessing vs cracking		#* Guessing vs cracking
			#* How passwords are stored on Linux and Windows
			#* What is the purpose of salt in passwords
			#* Windows LM hash weaknesses.
			#* Rainbow tables.
			#* Pass-the-hash (why and how does it work).
			# Attacks and Defence of Network Infrastructure
	#*		#*

2011-12-10T16:37:24Z

Topics

←Vanem redaktsioon		Redaktsioon: 10. detsember 2011, kell 18:37
139. rida:		139. rida:
	#* Sources for targeted network reconnaissance		#* Sources for targeted network reconnaissance
	# Network scanning and enumeration		# Network scanning and enumeration
			#* Phases of network scanning: host discovery, port scanning, service and application version detection, OS fingerprinting, vulnerability scanning
			#* Methods used for conducting different phases
			#* Network scanning in IPv6 networks
			#* Defences against scanning: detection, obscurity, deception (honeypots, tarpits, spidertraps)
			#* DNS and SNMP enumeration
			# Password Attacks
			#* Guessing vs cracking
	#*		#*

2011-12-10T16:29:15Z

Topics

←Vanem redaktsioon		Redaktsioon: 10. detsember 2011, kell 18:29
133. rida:		133. rida:

	== Topics ==		== Topics ==
			The exam will be in written form (pen and paper), closed-book (you are not allowed to use materials, internet, your computer, etc). There will be approximately 10 questions covering topics from both the labs and lectures:

			# Anatomy of an attack. Typical attack phases
			# Reconnaissance
			#* Sources for targeted network reconnaissance
			# Network scanning and enumeration
			#*

	== Results ==		== Results ==

	* [[ITX8063:2011:Results \| Results]]		* [[ITX8063:2011:Results \| Results]]

2011-12-07T16:08:57Z

Deadline

←Vanem redaktsioon		Redaktsioon: 7. detsember 2011, kell 18:08
123. rida:		123. rida:
	= Exam and Results=		= Exam and Results=
	== Deadline ==		== Deadline ==
	* Deadline for accomplishing practical tasks and submitting lab report is '''09 Jan 2012'''		* Deadline for accomplishing practical tasks, homework and submitting lab report is '''09 Jan 2012'''
	** Even if you take the exam on 19 Dec you can still finish the labs '''that are still open''' after the exam. Only automatically scored exercises will remain open. The deadline for DNS tasks was couple of weeks ago and no new submissions will be accepted.		** Even if you take the exam on 19 Dec you can still finish the labs '''that are still open''' after the exam. Only automatically scored exercises will remain open. The deadline for DNS tasks was couple of weeks ago and no new submissions will be accepted.
	** As always: do not leave solving the tasks on the last moment. There are no guarantees of availability of infrastructure and instructor after the lecture session.		** As always: do not leave solving the tasks on the last moment. There are no guarantees of availability of infrastructure and instructor after the lecture session.

2011-12-07T12:34:47Z

Grade assignment

←Vanem redaktsioon		Redaktsioon: 7. detsember 2011, kell 14:34
117. rida:		117. rida:
	* Bonus		* Bonus
	** Capture the Flag Exercises: 5 first according to the scoreboard will get 85 points for the practical tasks (instead of max 50). Those students do not have to provide a lab report as well.		** Capture the Flag Exercises: 5 first according to the scoreboard will get 85 points for the practical tasks (instead of max 50). Those students do not have to provide a lab report as well.
	** Practical Homework (web exploit analysis): 15p		** Practical [[ITX8063:Homework \| Homework]] (web exploit analysis): 15p

	* [[ITX8063:2011:Results \| Results]]		* [[ITX8063:2011:Results \| Results]]