December 11, 2018
Crypto test 2
Jan 4, 10-11:30 SOC-311 Jan 18, 10-11:30 5 topics out of 15 topcs from https://courses.cs.ttu.ee/pages/ITC8240_Cryptography https://courses.cs.ttu.ee/w/images/e/e0/ITC8240-Test-Preparation.pdf
knowledge base
goo.gl/KdSCtt Signing certificate URL of this doc is https://pad.koodur.com/p/x509 Lab assignment: – Generate RSA keypair and certificate signing request on your laptop – Send CSR to lauri.vosandi@gmail.com – Install one of following OpenVPN options below – Try to compose OpenVPN configuration file based on the bits and pieces from slides – Wait for Lauri to...
no definition for terrorism. there have not been terrorist cyber attack with great demages Cyber warfare Physical demage of injury = breach of sovergenity loss of functionality (email of government dont work 2007 Estonia) = not serious enoug (Tallinn manual), could be seen in case that it leads to neseccity to repair assets, than it is breach If Estonia is...
BASICS:https://treaties.un.org/doc/publication/ctc/uncharter.pdf Article 2 (4)All Members shall refrain in their international relations from the threat or use of force against the territorial integrity or political independence of any state, or in any other manner inconsistent with the Purposes of the UnitedNationsArticle 51Nothing in the present Charter shall impair theinherent right of individual or collective selfdefenseif an armed attack occurs against a...
use only bcrypt or scrypt for hashinghttps://medium.com/4iqdelvedeep/1-4-billion-clear-text-credentials-discovered-in-a-single-database-3131d0a1ae14 https://gist.github.com/scottlinux/9a3b11257ac575e4f71de811322ce6b3 Rainbowtables if NTLM tables, just go to find it in rainbowtables ihatefirewallsandlovepasswords hashcad, johntheripper student counsellor: probally year of birtheveryone has different passwordsWe have no root access in this lab Shared pad: https://pad.koodur.com What to use instead of passords?biometry (fingerprint is digitalized = another kind of password)face recognition – if used one camera, it...
Passive (DNS? Social Media accounts),Active Vulnerabilities identificationadvanced hackers use tools that produce less traffic Exploitation -exploit: piece of software which takes advantage of vulnerabilities– Web archives: https://archive.org/WhoisSearch enginesShodanMetadata of documentsIP and port scanning traceroute : 3 different packets send to the next IP. that idicates reachability traceroute: request timed out in the middle of path: this host is unreacahble but other...
incident response – the process by which organization handles a date breach or cyberattack and conseqences of it Dig. forensics != data recovery Dig. forensics != incident response Digital forencis is a sum of incident response, data recovery… You will be expert in several fields of forensics, not in every most probably. It is not possible within 45 minutes like...
https://docs.google.com/presentation/d/1yK6ANhM4af-5CQXBKpNJWVmv0Sccr-yTKjdLStzY3EY/edit iptablesTo check what is happening on the ubuntu server: journalctl –xe ports: netstat -lntup,ss -lntup # Modern Linux Dropping is being used in production instead of rejecting packets. The attacker can’t be sure about existence of the address (service) so it will slow him down. netstat -lntup # listening servicesdhclient -v eth0 # DHCP requesttcpdumparp -n https://elab.cs.ttu.ee/my_labs : ilovefirewalls...
It’s changing extremely fast. we don’t know where the data is, but we need to get it fast. Mutual legal assistance treaties. Convention on cybercrime. But it is not declaring cooperation within states. Even if you have data from the other state, they have to be gained within Mutual legal assistance, otherwise, they are not taken as a proof by the court....
How much does Google about us?340 request to Google servers from android phone per 24 hrshttps://adssettings.google.com/authenticatedhttps://myactivity.google.com/https://takeout.google.com/settings/takeout?pli=187% of income comes from advertisement Packages and malware.docxPart items (workbook.xml, sheetn.xml, other files )Content type items (description of)extraction of the document container: .doc has a “filesystem” inside a container.doc profiling tools OfficeMalScanner DFView (oldschool microsoft OLE structure viewer) .. .pdf The original look of...