Download
1 / 36
360 likes | 531 Vues
Network Security. 14. Lecture. A brief history of the world. Lecture’s outline. Security Attacks Malware--- attacks on integrity and privacy Viruses, Trojan Horses, Spyware and Key-loggers Spoofing attacks--- attacks on authenticity URL, DNS, IP, MAC, Email/ Caller ID spoofing
E N D
Network Security 14 Lecture
Lecture’s outline • Security Attacks • Malware---attacks on integrity and privacy • Viruses, Trojan Horses, Spyware and Key-loggers • Spoofing attacks---attacks on authenticity • URL, DNS, IP, MAC, Email/ Caller ID spoofing • Network-based attacks---attacks on availability • DoS attack, worms • Social engineering attacks • Phishing, greetings card, lottery win, etc.
Security Attacks • Privacy The sender and the receiver expect confidentiality. The transmitted message must make sense only to the intended receiver and should be unintelligible to all others. • Authentication The receiver is sure of the sender’s identity and that an imposter has not sent the message.
Security Attacks • Integrity The data must arrive at the receiver exactly as it was sent by the original sender. There must be no changes in transmission, either accidental or malicious. • Non-repudiation: A receiver must be able to prove that a received message came from a specified sender. The sender must not be able to deny sending a message that it has, in fact, sent.
Motivation for security attacks Source: “Computer Networks” by Andrew Tanenbaum
a The software that is written for malicious purposes Malware Viruses Worms Trojan Horses Spyware Keyloggers
Reproduced with permission. Please visit www.SecurityCartoon.com for more material
Viruses • A computer virus attaches itself to a program or file enabling it to spread from one computer to another, leaving infections as it travels.
Designing A Virus • Locate the first executable instruction in the target program • Replace the instruction with an instruction to jump to the memory location next to the last instruction of the target system • Insert the virus code for execution at the end • Insert an instruction after virus code that simulates the first instruction • Then jump to the second instruction of original code
The first computer virus Brain Virus (Pakistani Flu) 1986 Credit: http://en.wikipedia.org/wiki/Brain_(computer_virus)
Propagation effect of worms After slammer worm Before slammer worm Credit:YasharGanjali; www.caida.org
b where the attacker impersonates some one else Spoofing Attacks Emailspoofing URL spoofing DNS spoofing IP spoofing MAC spoofing
b.1 Email Spoofing (phishing)
b.2 URL Spoofing (phishing)
1 https://webmail.niit.edu.pk/src/login.php GenuineURL; Site: niit.edu.pk; directory: src; file: login.php
https://webmail.niit.org.pk/src/login.php https://webmail.niit.org.pk/src/login.php 2 The second-level domain is .org and not .edu; faked website HACKED HACKED HACKED Victim.ID **************
https://webmail.niit.edu.tk/src/login.php https://webmail.niit.edu.tk/src/login.php The first-level domain is .tkand not .pk; faked website 3 HACKED HACKED HACKED Victim.ID **************
https://202.128.111.87/src/login.php https://202.125.111.57/src/login.php The IP address does not correspond to webmail.niit.edu.pk; faked website HACKED HACKED HACKED Victim.ID 4 **************
b.3 DNS Spoofing b.4 b.5 IP Spoofing MAC Spoofing
DNS spoofing DNS Request WWW WWW Tell me the IP address of www.niit.edu.pk?
DNS spoofing DNS Reply WWW WWW The IP address of www. niit.edu.pkis 110.125.157.198 The IP address of www.niit.edu.pkis 110.125.157.198 Fake NIIT site
MAC/ IP spoofing Private network 192.168.1.0/24 00:aa:bb:cc:dd:ee:ff .254 … Malicious node .1 .254 A malicious node can pretend to be another node 00:aa:bb:cc:dd:ee:ff
c where the attacker pretends to be something he/she/it is not Network-based attacks Worms Denial of Service attacks
d Targets the weakest component of a security system---the users Social Engineering
? Questions/ Confusions? ? ?
