preview

Nt1310 Unit 3 Network Security Assignment 1

Decent Essays
Open Document

SOFTWARE SECURITY ASSIGNMENT 1

Rakesh Subramanian Suresh 1207412319 9/29/20144

1.
a)
Some of the Authentication techniques used are Extensible Authentication Protocol, EAP – Transport Layer Security, EAP-Microsoft Challenge Handshake Authentication Protocol version 2(EAP-MS-CHAP v2) and Protected EAP (PEAP).
In Extensible Authentication Protocol, a random set of authentication mechanism is used such as using smart cards or certificates or using user’s credentials. Primarily the WLAN uses EAP for the purpose of passing messages during the authentication process.
Similarly the EAP-Transport Layer Security is a subset of EAP which is used where the environment is certificate based. It provides a high level security with strong …show more content…

During this process both client and server should show that they knew each other. The EAP-MS-CHAP v2 works only with PEAP. Protected EAP uses transport layer security to enhance security authentication. PEAP uses server authentication is used for protecting against creation of illegal access points and it also uses FAST RECONNECT.
Reference:http://technet.microsoft.com/en-us/library/cc759077(v=ws.10).aspx

b)
Yes the wireless service is susceptible to packet sniffing. Some of the EAP methods that rely on username and password authentication are Protected EAP, Tunneled Transport Layer Security (TTLS) and Lightweight EAP. The above methods has the vulnerability to send user information such as usernames as plaintext over the network. This discloses private information of the organization to attackers as it allows attackers to collect valid user names. This can be used to attack further.
Reference:http://www.sans.org/reading-room/whitepapers/wireless/80211-8021x-wireless-security-171, http://www.opus1.com/nac/whitepapers-old/04-eap_options-lv05.pdf …show more content…

• Cookies can be found, which means someone else can masquerade as us if they can find the right cookies to use.
• Contents downloaded using the networks are visible.

c)
We should perform Attack and Penetration tests to identify vulnerabilities in our network which can be accessed by hackers. Attackers sniffing on the network look for weak points in the network, thus knowing the weak points using internal and external attack and penetration tests will make our network more secure.
Network protocol such as SSH should be used between networked computers. The SSH protocol helps in making a secure connection between computers or devises during information transfer, thus making it harder to hack.
References:http://www.securestate.com/Services/Profiling/Pages/Internal-Attack-and-Penetration.aspx

3)
SYN Flood attack performed in the below screenshots is done using a java tool called SynGUI.
Initially the Linux (Ubuntu) is run on an virtual machine using VMWARE. The attack performed is on the IP address of the Linux OS.
Steps Performed:
1) IP address of the Linux is obtained using IFCONFIG.
2) The Linux firewall is disabled using the

Get Access
Related
Get Access