TABLE OF CONTENTS Social engineering
Using published information
Port scanning
Network mapping
An attack on a computer network doesn t necessarily begin with technology. In fact, some system violations are made possible through information gathered directly from employees and other public sources, most of which is available legally.
In addition, simple electronic tools can give a system cracker information about the layout of a network, what operating system is in use, and what TCP/IP ports are open. All this information goes into assembling a profile of a network that can then be used to identify specific parts of the network that are vulnerable to attack.
In this chapter we ll start by looking at a form of information gathering that involves scamming users out of information such as user names and passwords. Known as social engineering, it usually involves role-playing by the person attempting to gain unauthorized system access. There is also an electronic version of social engineering phishing that involves tricking people by sending them misleading e-mails.
We ll then turn to published information available on the Web through Internet registration databases. Finally, we ll examine some tools that are useful for troubleshooting a network, but that can also yield information that you probably don t want a cracker to know.
To understand social engineering, think Mission Impossible (the TV series) on a small scale. The person trying to obtain system access typically engages in a simple role play that tricks someone out of supposedly confidential...
