Security + - Vulnerability Assessment And Penetration Testing

Front 1

A way to mimic the steps taken by hackers. Performed to assess strengths and weaknesses within the security protocols. Mimic the steps that an unauthorized malicious user would take. Ensure senior management is aware before performing.

Back 1

penetration testing

Front 2

Penetration testing planning

Back 2

1) Define the details

2) Decide on a starting point

3) Objectives

4) Assess security of the applications

5) Full penetration is it needed? or stress testing?

Front 3

Penetration testing objectives

Back 3

1) test security of phone lines

2) assess security of applications

3) flaws of wireless networks

4) social engineering susceptability

Front 4

penetration tester

Back 4

1) internal - given access to the system(authorized)

2) external - try to hack into the system (unauthorized)

Front 5

four general processes for penetration testing

Back 5

1)verify that a threat exists

2)bypass security controls

3)actively test security controls

4)exploit any uncovered vulnerabilities

Front 6

an event that can cause harm to the asset

Back 6

threat

Front 7

three types of penetration testing

Back 7

1) black box

2) gray box

3) white box

Front 8

When the pen tester is given all the details of the organization including network infrastructure details

Back 8

white box

Front 9

When pen testing is outsourced and the pen tester isn't given any information on the organization or the infrastructure

Back 9

black box

Front 10

When the pen tester is given some details about the organization and it's network infrastructure; limited by the scope of the engagement

Back 10

gray box

Front 11

3 categories of information disclosure

Back 11

1) blind testing

2) double-blind testing

3) targeted testing

Front 12

Organization provides tester with the name of organization and nothing more

Back 12

Blind testing

Front 13

Minimal personal are informed of penetration testing. This is useful for testing security monitoring and incident-identification procedures and processes within an organization

Back 13

double blind testing

Front 14

Testing performed with complete knowledge of the organization's personnel. The pen tester works alongside the technical team as the results of the testing are openly discussed during the process

Back 14

targeted test

Front 15

penetration testing best practices/approaches

Back 15

1) reconnaissance

2) enumeration

3) vulnerability analysis

4) execution

5) document finding

Front 16

Penetration best practice that focuses on the gathering and analysis of the target organization from publicly available sources

Back 16

reconnaissance

Front 17

Process used to gather information about a target endpoint within the network infrastructure, such as web server or an administration portal by actively trying to connect to it

Back 17

enumeration

Front 18

Process that focuses on uncovering and identifying the vulnerability. No differentiation between vulnerability that can be exploited and ones that cant. This is a list of possible flaws, not verified flaws

Back 18

Vulnerability analysis

Front 19

verifying the vulnerabilities from being a what if and possibility to an actual itemized risk that needs to be addressed by the organization depending on the risk rating, scope of vulnerability and its overall impact to the organization.

Back 19

execution

Front 20

an itemized potential risk that may need to be addressed by the organization depending on the risk rating, scope of it, and it's overall impact to the organization; a flaw someone can exploit to cause harm

Back 20

vulnerability

Front 21

only addresses these at the potential level; results can be misleading when it comes to prioritizing risk that the company needs to address by mitigation strategies

Back 21

vulnerability assessment

Front 22

1) unpatched operating systems and programs

2) incorrectly configured firewalls

3) absence of antivirus software

4) weak passwords

5) incorrectly deployed intrusion prevention

6) intrusion detection systems

Back 22

Network vulnerabilities

Front 23

Three main types of threats

Back 23

1)insider

2)external

3)application-level

Front 24

threat that can be malicious in nature or simply unintentional
a

Back 24

insider

Front 25

threat that someone accesses the organizations network resources from outside out of the network

Back 25

external

Front 26

when an application is open to the public and are easily accessible with a username and password

Back 26

application level threat

Front 27

Vulnerability assessment steps

Back 27

1) familiarize yourself with the system

2) examine existing controls

3) compare controls to threats

4) document inadequate controls

5) discuss solutions

Front 28

Security assessment tools

Back 28

1) vulnerability scanners

2) honeypots

3) honeynets

Front 29

These are used to identify potential threats and weaknesses within a network infrastructure and can be used to test all the system components from hosts through networking appliances through applications

Back 29

vulnerability scanners

Front 30

With this tool you perform multiplatform scans including windows, MAC OS, Linux, and iOS, Android, and Windows phone devices that connect to areas such as Exchange Servers across all environments, including virtual machines and you can even analyze your network security setup and status

Back 30

GFI LANguard

Front 31

This tool provides patch, configuration, and compliance auditing, mobile, malware, and botnet discovery, sensitive data identification, and many other features

Back 31

Nessus vulnerability scanner

Front 32

This tool is a standalone application or as part of the Retina CS Unified Vulnerability Management platform. This tool also enables you to efficiently identify IT exposures and prioritize remediation enterprise wide.

Back 32

Beyond Trust Retina Network Security Scanner

Front 33

This tool is the basis for network security. It provides automated vulnerability assessments for network to systems including servers, desktops, and infrastructure devices. This tool helps your organization protect critical online assets by identifying vulnerabilities and flaws in operating systems and applications which could expose you to compromise and it helps you manage your process to correct those vulnerabilities and eliminate the risk to your business

Back 33

IBM Internet Security Systems Scanner Software (ISS)

Front 34

This tool is specifically designed to help monitor the behavior and health of the MAC system in a simple and straightforward manner and this is done in real time. It is also able to detect common problems with the MAC and OSX and will also provide useful tips to help you fix them

Back 34

X-Scan

Front 35

This is third generation network security analysis tool that has been available and actively updated for over ten years. It operates under UNIX, Linux, MAC OSX, or Windows. It integrates with the national vulnerability database, it performs SQL injection attacks and cross-site scripting, it can support remote self-scan and API facilities and there is enterprise search module along with standalone mode and daemon mode.

Back 35

SARA (Security Auditors Research Assistant)

Front 36

This tool can help you find and track vulnerabilities and perimeter servers and devices, web applications, and web sites, corporate networks, and even Amazon EC2 instances. Helps you prioritize and manage remediation, it can predict impact of zero-day attack and it can interactively view security posture throughout your entire network

Back 36

QualysGuard

Front 37

This tool uncovers areas of weakness and recommends fixes. It can also identify vulnerabilities on network devices, operating systems, desktop applications web applications, and database just to name few. It can detect and fix possible weaknesses in your network security before they can be exploited by intruders. It can anticipate and prevent common system vulnerabilities. In addition it can also perform configuration audits with policies defined by FDCC and DISA

Back 37

SAINT scanner

Front 38

the tool provides a streamlined method to identify missing security updates and common security misconfigurations

Back 38

Microsoft Baseline Security Analyzer

Front 39

this tool helps validate vulnerabilities

Back 39

exploitation tools

Front 40

three very common exploitation frameworks

Back 40

1) CORE Impact Pro

2) Immunity's CANVAS

3) Metasploit

Front 41

The most comprehensive commercial grade penetration testing product available enabling you to conduct real world assessments across the board spectrum of risk areas, including end user security awareness training, endpoint penetration testing, mobile devices penetration testing, password and identity cracking, and validating vulnerabilities identified by scanners; this tool allows you to evaluate your security posture using the same techniques employed by today's cyber criminals

Back 41

CORE Impact Pro

Front 42

This tool makes available hundreds of exploits on automated exploitation system and a comprehensive reliable exploit development framework to penetration testers and security professionals worldwide

Back 42

Immunity's CANVAS

Front 43

This is a penetration testing software that helps verify vulnerabilities and manage security assessments

Back 43

Metasploit

Front 44

A system that can be placed within a DMZ or a private network that is designed to lure malicious users away from production environments; it's a trap

Back 44

honeypot

Front 45

These are an entire network that is designed to attract attackers away from production environments.

Back 45

honeynets

Front 46

The ability to know and fully understand what your network should be doing as a normal day-to-day operations. Therefore anomalies occur, you will know by referring back to this. Some of the standard information that may be stored here: network diagrams, traffic content, WAN and LAN protocols, usage patterns, traffic on the network, updated logs, and statistical logs. Also documents all current hardware and cabling.

Back 46

network baseline

Front 47

Three main log file types

Back 47

1) history

2) event

3) system

Front 48

types of system events that are logged

Back 48

1) error

2) warning

3) information

Front 49

These type of files need to properly updated as the network baseline is continually upgraded. Should include description of what changed, the name of the person who performed the work so the individual can be referenced in case additional info is needed. Also document the reason for the applying the change and start date and completion date.

Back 49

Log files

Front 50

This is used to view stored log files.

Back 50

Event viewer

Front 51

special files that record important events that have occurred on the computer system. Examples of important events include who has successfully logged on, who has not been properly authenticated, or failed attempts at logging on to the system, all the way through to when an application malfunctions and returns a specific error message. Viewing these can be used for solving a security incident or simply to troubleshoot a failed driver.

Back 51

event logs

Front 52

Event viewer log types

Back 52

1) application

2) security

3) setup

4) system

5) forwarded events

Front 53

stores error and information about applications running within the Windows operating system

Back 53

application logs

Front 54

records security events

Back 54

Security logs

Front 55

contains a lot of the patch and update info for the system

Back 55

setup logs

Front 56

contains a lot information at a deep service and operating system level. Events to be viewed here include services that are running, stopped, or that are idle

Back 56

system logs

Front 57

records events to be forwarded from one host to another

Back 57

forwarded events

Front 58

These folders fall under the application and service heading logs

Back 58

1) hardware events

2) internet explorer

3) key management service

4) media center

Front 59

how best you wish to have the network infrastructure perform without altering the overall functionality of it, yet having a sustainable and useful security framework. Key factors: set the limit (max and min), use of performance counters and the configuration of alarms and alerts

Back 59

network threshold

Front 60

counters used to determine and set thresholds

Back 60

1) performance counters

2) memory use

3) disk space

4) CPU workload

5) page file use

6) CPU use