LOGO “ Add your company slogan ” Damaga ( 다막아 ) 핵심 0703 프로젝트.

Slides:



Advertisements
Similar presentations
COMS W6998 Spring 2010 Erich Nahum
Advertisements

Automated Firewalls with Mason William Stearns SANS Instructor, proctor, and network administrator
Netprog: IPv61 IPv6 Refs: Chapter 10, Appendix A.
Socket Programming with IPv6. Why IPv6? Addressing and routing scalability Address space exhaustion Host autoconfiguration QoS of flow using flowlabel.
The Journey of a Packet Through the Linux Network Stack
CS470, A.SelcukIPsec – AH & ESP1 CS 470 Introduction to Applied Cryptography Instructor: Ali Aydin Selcuk.
LINUX NETWORK IMPLEMENTATION Jianyong Zhang. Introduction The layer structure of network: 1) BSD socket layer: general data structure for different protocols.
Ipchains and Iptables Linux operating system natively supports packet-filtering rules: Kernel versions 2.2 and earlier support the ipchains command. Kernel.
Packet Injection 101 Vivek Ramachandran. What is packet injection ? Please go through the raw socket tutorial before going further. Simply put packet.
Lecture 1.2: Linux and networking Roei Ben-Harush 2015.
WOW NETWORK SIMULATOR Duke Lee, Mustafa Ergen, Jeff Ko WOW WOW UC Berkeley UC Berkeley.
Modular Protocol Architecture Link Layer Protocol Interface Specification Ruchira Datta UC Berkeley WOW Group.
ITINERANT: TCP Socket Migration Titus Winters Dan Berger CS 202: Spring ‘03.
Understanding Networks. Objectives Compare client and network operating systems Learn about local area network technologies, including Ethernet, Token.
Leon-Garcia & Widjaja: Communication Networks Copyright ©2000 The McGraw Hill Companies The user clicks on a link to indicate which document is to be retrieved.
Source Port # (16)Destination Port # (16) Sequence Number (32 bits) Acknowledgement Number (32 bits) Hdr Len (4) Flags (6)Window Size (16) Options (if.
Transport Layer: UDP COMS W6998 Spring 2010 Erich Nahum.
1 Netfilter in Linux Bing Qi Department of Computer Science and Engineering Auburn university.
IPSec and Firewalls Section 8.6.1, IPSec Internet Protocol Security –RFC 2401 (4301) –security in the network layer –authentication –secrecy –what.
Networks: OSI Model1 International Standards Organization Open Systems Interconnect (OSI) Reference Model.
1 IPv6 Refs: Chapter 10, Appendix A. 2 IPv6 availability Generally not part of O.S. Available in beta for many operating systems. 6-Bone is experimental.
Introduction to Linux Network 劉德懿
1 Networking (Stack and Sockets API). 2 Topic Overview Introduction –Protocol Models –Linux Kernel Support TCP/IP Sockets –Usage –Attributes –Example.
HANBAT Univ. Copyright ⓒ Embedded Team. All Rights Reserved Embedded System Software EMPOS II 를 이용한 PMP 기능 구현.
ECE Prof. John A. Copeland fax Office: GCATT.
Chapter 2 OSI Model and TCP/IP
Fall 2004FSU CIS 5930 Internet Protocols1 Architecture of Network Implementation Reading: Chapters 3 and 4.
Company Logo Add Your Company Slogan Web Service Architecture (JAVA Web Service) Using Netbeans NetDesign Version 22/10/2011 By Pornpan P.
IPv6, the Protocol of the Future, Today Mathew Harris.
Firewalling With Netfilter/Iptables. What Is Netfilter/Iptables? Improved successor to ipchains available in linux kernel 2.4/2.6. Netfilter is a set.
Firewall Tutorial Hyukjae Jang Nc lab, CS dept, Kaist.
T. Lopatic, J. McDonald, D. Song, "A Stateful Inspection of FireWall-1", Black Hat Briefings A Stateful Inspection of FireWall-1 Thomas Lopatic,
CSC 660: Advanced Operating SystemsSlide #1 CSC 660: Advanced OS Netfilter.
Socket Program Training 10/24/2011. Introduction Video Streaming Server –Darwin VoIP –Asterisk Socket Program –Ex: FTP Backdoor Program 2.
Network Layer by peterl. forwarding table routing protocols path selection RIP, OSPF, BGP IP protocol addressing conventions datagram format packet handling.
AN ENTERPRISE IPV6 MIGRATION TOOLKIT Christian Brown Steve Lotthammer Matt Oswalt.
Socket Buffer 발표자 유 종 욱 발표일 2003년 10월.
Firewalls Original slides prepared by Theo Benson.
PLUS 내부 세미나 1/22 The Libnet Library 이병영 2004/05/06.
Linux Networking Stack 指導老師 李正帆
Open System Interconnection Reference Model (OSI reference model) Prepared by: Eric Hansen and Dean Juola.
Introduction to Linux Firewall
Network Layer by peterl. forwarding table routing protocols path selection RIP, OSPF, BGP IP protocol addressing conventions datagram format packet handling.
A network primer (or refresher) Henning Schulzrinne (based on slides from Kurose/Ross)
통신 프로토콜 김영준.
Network Layer. application transport network link physical message segment packet frame signal Network Architecture.
1 CNLab/University of Ulsan Chapter 19 Firewalls  Packet Filtering Firewall  Application Gateway Firewall  Firewall Architecture.
Socket Program Training 10/27/2010. What is a Socket ? An interface between an application process and transport layer (TCP or UDP). 2.
IPv6 Security By Eric Pennington COSC 356 – Network Security Dr. Oblitey
Session 25: Netlink Sockets 문준혁. Index What are netlink sockets? Opening a netlink socket –Family Netlink messages –nlmsg_type –nlmsg_flags Lab.
Lecture 3: Stateless Packet Filtering. 2 Agenda 1 1 Linux file system - networking sk_buff 2 2 Stateless packet filtering 3 3 About next assignment 4.
Firewalls. A Firewall is: a) Device that interconnects two networks b) Network device that regulates the access to an internal network c) Program that.
Lecture 1.1: Introduction. 2 Agenda 1 1 What is Firewall Types of Firewall 2 2 Firewall in linux kernel 3 3.
sudo ./snull_load Two interfaces created: sn0, sn1
Internet technologies
8 IP: Error Processing (ICMP)
IS3440 Linux Security Unit 6 Using Layered Security for Access Control
FIGURE 12.1 Current and Projected Global Internet Bandwidth.
Chapter 5-Block Driver 中国科学技术大学软件学院.
FSU CIS 5930 Internet Protocols
Networks: OSI Reference Model
Socket Program Training
Code Review for IPv4 Metarouter Header Format
Project 2 Fall 04
Networks: OSI Reference Model
Training 2018/10/11.
Refs: Chapter 10, Appendix A
Сыныбы: 6 Пән мұғалімі: Сыздықова Эльмира
Packet Flow Permutation within Linux
Chapter 4: outline 4.1 Overview of Network layer data plane
Presentation transcript:

LOGO “ Add your company slogan ” Damaga ( 다막아 ) 핵심 0703 프로젝트

XXX.XXX XXX.XXX XXX.XXX Hacking

1 세대 Ipfw 2 세대 Ipfwadm 3 세대 Ipchains 4 세대 Iptables

Iptables 명령은 LINUX Ipv4 방화벽을 설정하는 명령어 Iptables 은 PacketFiltering 기능을 설정 PacketFiltering – 리눅스 커널에 있는 NetFilter 기능을 사용 - Packet 의 header 을 보고 전체 packet 의 전송여부을 결정함

Sutuct sk_buff *next Sutuct sk_buff *prev Sutuct net_device *dev --- Union h Union nh Union mac --- Unsigned char *head Unsigned char *data Unsigned char *tail Unsigned char *end Header Room Transport layer header Network layer header Link layer header Data Tail Room len truesize

Sutuct sk_buff *next Sutuct sk_buff *prev Sutuct net_device *dev --- Union h Union mac --- Unsigned char *head Unsigned char *data Unsigned char *tail Unsigned char *end /* Network layer header */ union { struct iphdr *iph; struct ipv6hdr *ipv6h; struct arphdr *arph; struct ipxhdr *ipxh; unsigned char *raw; } nh; Union nh struct iphdriphdr { __u8 tos; __u16 tot_len; __u16 id; __u16 frag_off; __u8 ttl; __u8 protocol; __u16 check; __u32 saddr; __u32 daddr; };

/* Transport layer header */ union { struct tcphdr *th; struct udphdr *uh; struct icmphdr *icmph; struct icmp6hdr *icmp6h; struct igmphdr *igmph; struct iphdr *ipiph; struct spxhdr *spxh; unsigned char *raw; } h; Union h Sutuct sk_buff *next Sutuct sk_buff *prev Sutuct net_device *dev --- Union nh Union mac --- Unsigned char *head Unsigned char *data Unsigned char *tail Unsigned char *end struct tcphdr { __u16 source; __u16 dest; __u32 seq; __u32 ack_seq;... __u16 window; __u16 check; __u16 urg_ptr; }; struct udphdr { __u16 source; __u16 dest; __u16 len; __u16 check; };

Sutuct sk_buff *next Sutuct sk_buff *prev Sutuct net_device *dev --- Union h Union nh Union mac --- Unsigned char *head Unsigned char *data Unsigned char *tail Unsigned char *end typedef struct ip { char saip[Bufsize]; char daip[Bufsize]; char sport[10]; char dport[10]; char protocol[10]; }IPADDR; Union nh Union n

일월화수목금토 임무분담 및 주제설정 자 료 수 집 NAT 망 구현, My sql, Python 설치 실 제 구 현 Debug 발표 ppt 작성

SERVER 디바이스 드라이버 모듈 패킹 후킹 모둘 소켓 프로그래밍 양시명 양만철 CLIENT 클라이언트 소켓차재우 최영업 G U I 다막아 프로그램차재우 양시명 양만철 최영업

개발환경 Windows XP Visual Stdio 6.0 LINUX Redhat 9 kernel version Python 2.5 WxPython 2.8 WING IDE 2.1 MySQL SQLyog 참고서적 및 WEBSITE 열혈강의 Python (FREELEC) 리눅스 커널프로그래밍 ( 한빛 ) Mysql 시스템관리와 프로그래밍 리눅스 디바이스 드라이버 / xdocSgml/Installation-HOWTO /

GUI 어렵다. 서버 컴퓨터는 잘 죽는다 ( 교체 필히 요망 ) 새로운 언어에 대한 자신감 앞으로의 프로젝트에 대한 자신감

LOGO “ Add your company slogan ” 핵심 0703 만세