Stealing the Network: How to Own the Box
What would happen if the attackers were highly motivated and highly skilled? These authors have taken the time and effort to create ten stories exploring just what it would take to own the network.
TABLE OF CONTENTS Stealing the Network: How to Own the Box
Appendix: The Laws of Security
by Ryan Russell
This book contains a series of fictional short stories demonstrating criminal hacking techniques that are used every day. While these stories are fictional, the dangers are obviously real. As such, we ve included this appendix, which discusses how to mitigate many of the attacks detailed in this book. While not a complete reference, these security laws can provide you with a foundation of knowledge prevent criminal hackers from stealing your network
Introduction
One of the shortcuts that security researchers use in discovering vulnerabilities is a mental list of observable behaviors that tells them something about the security of the system they are examining. If they can observe a particular behavior, it is a good indication that the system has a trait that they would consider to be insecure, even before they have a chance to perform detailed tests.
We call our list the Laws of Security. These laws are guidelines that you can use to keep an eye out for security problems while reviewing or designing a system. The system in this case might be a single software program, or it could be an entire network of computers, including firewalls, filtering gateways, and virus scanners. Whether defending or attacking such a system, it is important to understand where the weak points are.
The Laws of Security will identify the weak points and allow you to focus your research on the most easily attackable areas. This Appendix concerns itself with familiarizing you with these laws.
Knowing...
Copyright Syngress Publishing, Inc. 2003 under license agreement with Books24x7
