GENI, Pen Testing, & other stories Dr. X

Outline What is GENI… really? Pen testing & ethical hacking Logistics: Bring at least one computer per team for Tuesday!! Denial of Service lab will be completed in class Download and install Wireshark: URL Or use Kali VM

Global Environment for Network Innovations (GENI)  Virtual laboratory for networking and distributed systems research and education. GENI allows experimenters to: Conduct research and create new internet protocols Experiment with cybersecurity concepts Conduct wireless research Educate! Use in classes and perform cool experiments

Global Environment for Network Innovation (GENI) Virtual Lab Obtain compute resources from locations around the United States; Connect compute resources using Layer 2 networks in topologies best suited to their experiments; Install custom software or even custom operating systems on these compute resources; Control how network switches in their experiment handle traffic flows; Run their own Layer 3 and above protocols by installing protocol software in their compute resources and by providing flow controllers for their switches.

GENI

Simulating Denial of Service Real machines Small network Attack traffic Regular internet traffic You control all these!

What is Denial of Service? A computer network attack that is designed to deplete resources and prevent legitimate users from accessing a site Can target small and large businesses Traffic flood, large payloads sent slowly, amplification attack Resources: Memory CPU Bandwidth

Computer Network Attacks Passive: Scanning, Reconnaissance Active: Distributed Denial of Service Spoofing Man in the middle

Let’s run an attack… next Tuesday! Observe how fast it is How detrimental it can be to a small network Remember: it is illegal to use any of the tools that create an attack on any machines except the lab machines!

Kahoot time!

Security as Art No hard and fast rules nor many universally accepted complete solutions No manual for implementing security through entire system Security as Art There are no hard and fast rules regulating the installation of various security mechanisms. Nor are there many universally accepted complete solutions. While there are many manuals to support individual systems, once these systems are interconnected, there is no magic user’s manual for the security of the entire system. This is especially true with the complex levels of interaction between users, policy, and technology controls.

Security as Science Dealing with technology designed to operate at high levels of performance Specific conditions cause virtually all actions that occur in computer systems Nearly every fault, security hole, and systems malfunction are a result of interaction of specific hardware and software If developers had sufficient time, they could resolve and eliminate faults Security as Science We are dealing with technology developed by computer scientists and engineers—technology designed to perform at rigorous levels of performance. Even with the complexity of the technology, most scientists would agree that specific scientific conditions cause virtually all actions that occur in computer systems. Almost every fault, security hole, and systems malfunction is a result of the interaction of specific hardware and software. If the developers had sufficient time, they could resolve and eliminate these faults.

Security as a Social Science Social science examines the behavior of individuals interacting with systems Security begins and ends with the people that interact with the system Security administrators can greatly reduce levels of risk caused by end users, and create more acceptable and supportable security profiles Security as a Social Science There is a third view: security as a social science. Social science examines the behavior of individuals as they interact with systems, whether societal systems or in our case information systems. Security begins and ends with the people inside the organization and the people that interact with the system planned or otherwise. End users that need the very information the security personnel are trying to protect may be the weakest link in the security chain. By understanding some of the behavioral aspects of organizational science and change management, security administrators can greatly reduce the levels of risk caused by end users and create more acceptable and supportable security profiles.

Penetration Testing Legal and authorized attempt to locate and successfully exploit computer systems for the purpose of making those systems more secure

Differences Between attacks and vulnerabilities? Between pen testing and vulnerability assessment? Attacks are the techniques that attackers use to exploit the vulnerabilities in applications. Attacks are often confused with vulnerabilities, so please try to be sure that the attack you are describing is something that an attacker would do, rather than a weakness in an application.

Black vs white hat

Black vs white hat Authorization Motivation Intent

The cycle of Pen Testing Reconnaissance Scanning Exploitation Back doors Cover tracks… rinse, repeat

Reconnaissance Open Source Intelligence (OS Int) Google is your friend – more elaborate searches than you have ever thought! Site: Filetype: Boolean logic Google hacking DB Whois Social Networks Job Ads

Reconnaissance exercise Find a company you have never heard before: Charleston local startups Read the news Use the OS Int website and google to gather as much info as possible: What software or Operating System do they use? Who are the administration people: CEO, CFO, CIO etc. Where do the administration people live, what are their interests? What email do they use? Who is their Internet Service provider, Domain Name Server (DNS)? Do they have any files online that they should not have?? Any other information about the technical infrastructure of the company?

Scanning Open ports Open services Intrusive Informative!

Scanning Demo By Dr. X

Exploitation Tools Exploits Metasploit Nessus Custom programs Reverse Shell Elevation of privileges Password file Secret/important information Keylogger Malware: ransomware, virus, spyware

Tools of the trade

Tools Kali Programming Your brain!

Backdoors Vulnerable accounts Open ports & services

Covering your tracks Delete any files, history Command line rocks!

Summary GENI is awesome Pen testing is not rocket science Learn how to exploit… in order to know how to defend!

Capture the Flag (CTF) Competition: to train future defenders Topics Cryptography Steganography OS Int Network forensics Web app exploits … and more! Find information, steal password, solve a riddle Wanna play?