"Network attack and defense practice," the first week of operation

20,199,138 2019-2020-2 "network attack and defense practice," the first week of operation

1. knowledge carding and summary

1.1 Overview of network attack and defense technology

First, learn the Dasher worm emergency response events of the actual cases, so I have a visual impression of the network attack and defense technology; the understanding of the history of the hacker Road, network attack and defense technology framework and outlines the different types of offensive and defensive technology; this chapter focuses on the offensive and defensive technology can not be ignored physical attacks and social engineering; finally emphasized the right attitude and hackers should be aware of laws and regulations.

Network attack and defense technology framework

1.2 three types of attack techniques:

(1) Using software security system to attack
(2) Application protocol security flaws network protocol attacks
(3) Using the human weaknesses of social engineering attacks

Attack of network protocols including:
(1) Network Interface Layer: an Ethernet-based protocol and the mainstream WIFI broadcast protocol, there is a risk of eavesdropping network sniffer (Sniffer)
(2) interconnection layers: the IP protocol is performed View route only when forwarding destination address, source address not be verified, so an attacker can implement IP source address spoofing, impersonate another IP address to send data packets, in order to hide the source of the attack purposes.
ARP, ICMP, and so there is a corresponding protocol defect
(3) transport layer: three-way handshake for the connection establishment procedure SYN Flooding denial of service attacks using vulnerability disconnect function TCP RST attacks, TCP session hijacking, etc.
(4) application. layer: HTTP, FTP, POP3, SMTP etc. in plain text encoding, there is sensitive information eavesdropping, tampering and impersonation attacks such risks.
System security attack and defense

The life cycle of software security vulnerabilities

Web security offensive and defensive

Collection is currently on the hot issues in the field of network attack and defense, but also mainstream applications. Including Web server security, Web application security, Web client and Web browser security transmission protocol security.