CSCU Module 07 Securing Network Connections PDF

Securing Network Connections
Module 7
Simplifying Security.
CopyrightbyEC-Council
AllRightsReserved.ReproductionisStrictlyProhibited.
May23,20119:45AMPST
PlayStation Network Security Breach

Will Cost Sony Over $170 Million
ThehackerorhackersthatbroughtdownSonysvideogameand
entertainmentserviceshascostthecompanymorethanjustcustomer
satisfaction.AccordingtoSonysofficialearningsforecast,theshutdown
ofPlayStationNetworkandQriocity willcostthegamemaker
approximately$170million.
Theattack,whichoccurredonApril20,resultedinthelossofcrucial
customerinformationfrommillionsofSonygamersandentertainment
customers.Sonyhasinvestedheavilyinstrengtheningitsnetworksbefore
recentlyreopeningtheservice.Inaddition,thecompanyisofferingfree
datasecurityforitscurrentcustomersandofferingfreegamesandother
rewardsforthosewhoremainedthroughtheoutage.
Wevebeenfortifyingoursystemsecurity,saidShuhei Yoshida,
president,worldwidestudios,SonyComputerEntertainmentlastweek.
ThepastthreeweekshavebeenthelongestinmylifeforPlayStation.
Weappreciatethesupportandpatienceourcustomershaveshown.
Wereinthefinalphaseofrestorationsandourtargetdatetoget
everythingupisbytheendofthismonth.Asecureonlineenvironmentis
ournumberonepriority.
http://www.gamerlive.tv
2
Module Objectives
HomeNetwork
UsingtheNetworkwithMACOSX
StepsforHomeNetworking
NetworkSecurityThreats
WirelessNetworks
SecuringNetworkConnections
SettingUpaWirelessNetwork
GeneralSecurityPracticesinHome
Networking
CommonThreatstoWireless
Network
NetworkAdapters
SecuringWirelessNetwork
TroubleshootingwithNetwork
Adapters
UsingtheNetworkwithWindows7
NetworkSecurityChecklist
Module Flow
Homeand
Wireless
Networks
SettingUpa
Wireless
Network
Wireless
Network
Security
Usingthe
Networkwith
Windows7
Usingthe
Networkwith
MACOSX
Securing
Network
Connections
Network
Adapters
Troubleshooting
withNetwork
Adapters
Home Network
Ahomenetworkallowsthecomputersto
communicate withoneanother
Internet
Iftheuserhastwo ormorecomputers at
home,anetworkcanletthemshare:
Filesanddocuments
AnInternetconnection
Printersandscanners
Stereos,TVs,andgamesystems
DVD/CDburners
DSL/Cable
Modem
Printer
Router
PersonalComputer
Laptop
GamingDevice
SimpleHomeNetwork
Network Devices
AccessPoint
Router
Wirelesscommunicationshardware
thatcreatesacentralpointof
wirelessconnectivity
Devicesthatcanconnectseveral
networkdevices
Hub/Switch
Gateway
Usedtoconnectallsegmentsofa
network
Anydevicethatconnects
differentnetworkenvironments
Converter
Transceiver
Usedtoconnectseveraltypesof
cableswithinanexistingnetwork
Networkdevicethathasboth
transmitterandreceiver
Networkadapter/interfacecard
Cable
Usedtophysicallyconnectacomputer
toanetwork
Usedtoconnectonenetwork
devicetoother
Terminals
Modems
Usedtochangedigitaldataintoanalog
tobetransmittedacrossananalog
networkmediumandthenbackto
digitalatthereceivingend
Hardwaredevicesusedtoenterdatainto
acomputerortodisplaydatafromthe
computer
Steps for Home Networking

Notedownallthecomputersand
hardware
Purchasetherequiredhardware
Checkfornetworkinterfacecardon
eachcomputer;ifnotavailable,fix
them
Ensurethatcomputersandallother
networkdevicesareconnectedusing
cables
Selectonecomputerashostand
connectittotheInternet
Connecttherestofthecomputerstothe
hostusingswitch/router
Installnetworkadaptersthrougha
networksetupwizardonallthe
computers
Restartallthecomputersandstart
sharingthefilesandaccessingthe
Internet
Wireless Networks
Restaurants,hotels,businesscenters,
apartmentcomplexes,andindividualsoften
providewirelessaccesswithlittleorno
protection
Wirelessnetworksareusedtoconnectthe
computerstoeachotherwithoutanycables
ServiceSetIdentifier(SSID)isthenameofthe
network
Theyhavebecomepopularduetoeaseof
installation andtheincreasingpopularityof
laptops
Alldevicesonthewirelessnetworkmustuse
thesameSSIDtocommunicatewitheachother
LaptopwithExternalWiFiCard
WiFiNetwork
EthernetCable
Internet
DSL/CableModem
WiFi Router
DesktopPCwith
EthernetAdapter
LaptopwithInternalWiFiCard
Module Flow
Homeand
Wireless
Networks
SettingUpa
Wireless
Network
Wireless
Network
Security
Usingthe
Networkwith
Windows7
Usingthe
Networkwith
MACOSX
Securing
Network
Connections
Network
Adapters
Troubleshooting
withNetwork
Adapters
Setting Up a Wireless Network in Windows 7

TosetupawirelessnetworkinWindows7,youshouldhaveWirelessRouter,Wireless
Adapter,andanInternetconnection
IntheStart searchbox,typeNetwork andselectNetworkandSharingCenter
ClickSetupanewconnection ornetwork
ClickSetupanewnetwork andclickNext
10
Changing Wireless Networking

Configuration in Windows 7
SelectManageWirelessNetworkfromNetworkandSharingCenter
ClickAdd ifyouareaskedHowdoyouwanttoaddaNetwork? SelectManuallycreateanetwork
profile
11

Completethefollowinginformationforthewirelessnetworkyouwant
toadd
ChecktheoptionsStartthisconnectionautomatically and Connect
evenifthenetworkisnotbroadcasting ClickNext
SelectChangeconnectionsettings
UnchecktheoptionConnecttoamorepreferrednetworkifavailable
in Connectiontab
SelecttheSecuritytab,nexttoMicrosoftProtectedEAP (PEAP) Click
Settings
12

ProtectedEAPProperties popsup checktheoptionto
Validateservercertificate
In TrustedRootCertificationAuthorities: checkClass3
PublicPrimaryCertificationAuthority
In SelectAuthenticationMethod:, selectSecuredPassword
(EPAMSCHAPv2) ClickConfigure button
UncheckAutomaticallyusemyWindowslogonname
password (anddomainifany) Click OK todismisseachof
theopenwindows
Aballoonwillappearnearthesystemtraythatreads,
Additionalinformationisrequiredtoconnecttoname
whichyouhaveprovided ClickBalloon
EnteryourNETID andpassword,aftervalidating,another
balloonappearsatsystemtrayas Additionalinformationis
requiredtoconnect
Clicktheballoon ClickOK toagreeandvalidatethe
ServerCertificate
Afterafewminutesyouwillconnectedtoyourwireless
network
13
Setting Up a Wireless Network in

Mac
ClickNetworkPane insystempreferences
andchooseAirPort entry
EnabletheShowAirPortStatusinMenu
Bar checkbox
Closethesystempreferences
ClicktheAirPort statusiconinthemenu
bar
Clickcreatenetwork,enteranamefor
yournetwork
Marktherequiredpassword checkbox
Enterapassword foryournetworkand
thenenteritagaintoconfirmit
Click OK
14

Configuration in Mac
GototheupperrightAirport icon
SelecttheUConnect optionfromthedropdownmenu
EnterUserName andPassword fields,select
Automatic for802.1x,andCheckRememberthis
Network click OK
Acceptthecertificateverificationbyclickingon
Continue
Note:YoushouldconnecttoUConnectshortly.Ifthis
doesnothappen,checkyourprofile.
GotoSystemPreferences andclickNetwork
Verifythatyouareconnected
SelectAirport totheleft andclickAdvanced
Clickonthe802.1X tabandselecttheWPA:UConnect
profile
Verifythat PEAP istheonlyProtocol checked.
SelecttheConfigureTrust button
SelecttheServers tabClickonthe"+.Selectoneof
theavailableserverandclickOK
HitOK twiceand clickApply
15
Module Flow
Homeand
Wireless
Networks
SettingUpa
Wireless
Network
Wireless
Network
Security
Usingthe
Networkwith
Windows7
Usingthe
Networkwith
MACOSX
Securing
Network
Connections
Network
Adapters
Troubleshooting
withNetwork
Adapters
16
Common Threats to Wireless Network

Eavesdropping
Usingwirelessnetworks,anattackercan:
Attackerscanuseavarietyoftoolstofindwirelessaccess
pointswheretheycanpickupanSSIDbroadcast
Readtheemailandinstantmessagesastheytravelacross
thenetwork
Monitorthewebsitesthattheuservisits
Copytheusernamesandpasswords
Viewfilesonthecomputersandspreadmalware
Discloseusersconfidentialinformation
Interruptthewirelessservice
ImplementunauthorizedWLAN
Sendspamorperformillegalactivitieswiththeusers
Internetconnection
SlowdowntheInternetperformance
Datainterceptionandmodification
Attackerswhogainaccesstoanetworkcaninsertarogue
computertointercept,modify,andrelaycommunications
betweentwolegitimateparties
Denialofservice
Attackerscanshutdownaccesspointsbyjammingair
withnoise,reroutingconnectionstodeadends,or
disconnectingvalidclients
Spoofing
EveniftheuserdisablesbroadcastingorturnsonMedia
AccessControl(MAC)filteringonthewirelessaccess
point,attackerscanuseantennastocaptureuserssignal,
determineSSIDorvalidMACaddress,andthenuseitto
impersonateanauthorizedclient
Freeloading
Anattackercanusethenetworkasafreeaccesspointto
theInternet
RogueWLANs
AttackerscaninstallunauthorizedWLANsonthenetwork
withease
17
Securing Wireless Network

PerformancemonitoringhelpsinidentifyingheavilyloadedIASservers
VerifythataccesspointsareconfiguredtousetheclosestprimaryIASserver
Turnoffthenetworkduringextendedperiodsofnonuse
RevisittheWLANnetworkdesignforincorrectaccesspointplacement
Donotconnecttounprotectedwirelessnetworksatpublicplaces
ChangethedefaultSSID
Changethedefaultadministratorpasswords(andusernames)
Disableorturnoff SSIDbroadcast forthenetwork asitmakesthenetworkinvisibletotheattackers
18
Securing Wireless Networks

1
EnableMACAddressfilteringtokeeptrackofallnetworkMACdevicesconnectingto
therouter
Datatransmittingoverwirelessnetworksshouldbeencryptedtopreventeavesdropping,
interception,anddatamodification
Networkleveldenialofserviceattacksarepreventedbyusinguserauthentication
UnauthenticatedaccesstothewirelessnetworkcanbepreventedbyusingVPN
connectionandIPSEC
VPNskeepthecommunicationssafebycreatingsecuretunnelsthroughwhichthe
encrypteddatatravels
Anetworkshouldbescannedusingsoftwarescanningtoolstolocateandshutdown
rogueWLANs
Iftheuserisconnectedtoanunprotectedwirelessnetworkatpublicplaces,donotvisita
websitethatrequiresapasswordunlessthewebsiteisencrypted
19
Module Flow
Homeand
Wireless
Networks
SettingUpa
Wireless
Network
Wireless
Network
Security
Usingthe
Networkwith
Windows7
Usingthe
Networkwith
MACOSX
Securing
Network
Connections
Network
Adapters
Troubleshooting
withNetwork
Adapters
20
Setting Up the PCs Name and Workgroup

Name in Windows 7
GotoStart ControlPanelandclick theSystemicon
Clickon ChangeSettings
IntheSystemPropertiesdialogbox,clicktheComputerNametab
ClicktheChange button
Givethecomputeranewnameandanewworkgroupname
ClickOK tosaveyourchanges
21
Sharing
Sharingisusedtosharefilesandprintersina
network
Itallowsmultipleuserstoaccessafile/folderby
enablingthemto:
Typesoffilesharing:
Defaultshare
Doesnotprovidesecurity
Read
Requiresnoconfiguration
Modify
Requiressharedesignation
Copy
Print
Restrictedshare
Providessecuritybylimitingthenumberofusers
accessingtheshareataparticulartime
Attackerswhocanaccessasinglecomputerina
networkcanalsostealinformationfromother
computersinthenetwork
Designatesspecificuserstoaccesstheshare
Note:Shareonlynecessaryfilesandfolders
insteadofthewholedrive
Allotspermissionstocontroluseractivityonthe
share(offline/online)
22
Transferring Files
Transferringfilesthroughemailandmessengers(YahooandMSN)
Scanforvirusesusingtheemailvirusscanner
TransferringfilesusingFTP,Telnet,andwebfolders
Enteravalidusernameandpassword forauthorizedaccess
Transferringfilesthroughpeertopeernetworks
P2Papplicationsareconfiguredsuchthatallmembersofthenetworkcan
accesseachothersharddrivesandfoldersbydefault
Thissettingmustbedisabled ifpossible
23
Simple File Sharing in Windows 7

Confirmthatyouhaveenabledfileandprintersharingonthenetworkcard
GotoStart ControlPanel NetworkandSharingCenter
Clickonchangeadaptersettings
ThenetworkConnectionswindowwillappear.Rightclickonthenetworkadapter(canbea
wirelessadapterorwiredEthernetadapter)inuseandclickProperties
Thenetworkcardspropertieswindowwillappear,thentickFileandPrinterSharingfor
MicrosoftNetworks andfinallyclickOK
Note:Donotenablethissimplefilesharingwhenyourcomputerisconnectedtoapublicnetwork
24
Selecttheappropriatenetworklocationtypebeforeenabling
filesharing,mostlyhomenetworkorworknetworktype
ClickonChangeadvancedsharingsettings
Locateyourcurrentsetprofile (homeornetwork),andturn
on/offthefollowingsettings
Turnonfileandprintersharing
Turnoffpasswordprotectedsharing
ClickonSavechanges
25

1.
Rightclickthefileorfolderyouplanto
share,selectSharewithandclickon
Specificpeople....
2.
TheFileSharingwindowwillappear.
Selectortypethenamesofthepeopleyou
wouldliketosharethefile/folderwithand
clickAdd.Setthepermissionleveland
clickShare
3.
Thenextwindowwilltellyouthatyour
file/folderisshared,clickDone toclose
thewindow
4.
Rightclickthesharedfolderandclick
Properties.ThengototheSharing tab to
displaythesharedfolder
5.
ClickontheSecurity tab.Checkthegroup
orusernamesthatareallowedtoaccess
thefile/folder,andensuretheuser/group
thatyouallowedtoaccessduringsharing
processislistedhereaswell
26
Hiding a Shared Disk or Folder

GotoMyComputer Organize FolderandsearchOptions
Tohidetheemptydrives,knownfiletypeextensions,andprotected
OSfiles,checktherespectiveoptions
ToShowhiddenfiles,folders,anddrives,enabletheshowhidden
files,folders,anddrives option
Tonotshowhiddenfiles,folders,anddrives,enabletheDon'tshow
hiddenfiles,folders ordrives option
27
How to Share Printer in Windows 7?
GotoStart DevicesandPrinters
ClickApply
Rightclicktheprinter tobeshared,thenclickonthe
Properties
SelecttheSharingtab andcheckSharethisprinterto
sharetheprinter
IftheotherusersusingadifferentversionofWindows
wanttoaccesstheprinter,thentheyneedtoinstalla
printerdriverthemselves
ClickAdditionalDrivers,checktheadditionaldriverto
beinstalled
Userwillbepromptedtoinstallthoseadditionaldrivers
afterclickingOK
TypeinanewnameintheSharenametextboxto
changetheprinternameonthenetwork;however,
thiswillnotchangetheprinternameonthecomputer
28
Using Printers on Other PCs

GotoStart DevicesandPrinters
DoubleclicktheselectiveprinterorclickonAddaPrinter
tobrowseforit
Selectaprinterfromthelistdisplayedandclickon Next
NowWindowswilltrytoconnecttotheprinterofchoice
Installthesoftwarefortheprinterwhenprompted
29
Accessing Files on Other PCs

Assignalettertoaparticularshareddiskorfolderon
thenetwork
ClickMycomputer MapNetworkDrive
Usingthedropdownlist,chooseadriveletter
Indicatewhichfolderordiskyouwantthisletterto
represent
Tomakethisletterassignment"stick,"turnon
Reconnectatlogon
ClickFinish
30
Windows Easy Transfer

WindowsEasyTransfer helpstheuserto
transferpersonalfiles,email,data,files,
media,andsettingsfromtheoldcomputer
tothenewone
Ittransfers:
Programs(applications)cannotbe
transferred
Useraccounts
Filesandfolders
Programdatafilesandsettings
Emailmessages,settings,andcontacts
Photos,music,andvideos
WindowssettingsandInternetsettings
WindowsEasyTransferprovidesanumber
ofwaysfortheusertoconnecttwo
computerstotransferthedata
Theseinclude:
EasyTransferCable isaspecialUSBcabledesignedto
workwithWindowsVistaandWindowsEasyTransfer
Iftheuseralreadyhasawiredorwirelessnetwork,
thisisagreatwaytotransferallofthedata
Itcancopythedatatoremovableharddiskandthen
copydatafromthatdisktonewcomputer
Itcanuseacomputer'sCDorDVDburnertotransfer
userdata
31
Module Flow
Homeand
Wireless
Networks
SettingUpa
Wireless
Network
Wireless
Network
Security
Usingthe
Networkwith
Windows7
Usingthe
Networkwith
MACOSX
Securing
Network
Connections
Network
Adapters
Troubleshooting
withNetwork
Adapters
32
Setting Up the PCs Name in MAC OS X

GotoApplemenu SystemPreferences
FromtheInternet&NetworksectionoftheSystemPreferenceswindow,selecttheSharing
option
AtthetopoftheFileSharingdialogbox,intheComputerNamebox,typethenewnamefor
yourMac
ClosetheFileSharingdialogbox
33
Setting Up the Workgroup Name

in MAC OS X
OpenSystemPreferences fromthe
Apple menu
OpentheNetwork iconinthe
Internet&Networkarea
Selectthenetworkconnectionyou
usetoconnecttotheWindows
network
ClicktheAdvanced buttonandthen
clicktheWINS tab
Typethenameoftheworkgroupin
theWorkgroup field
ClickOK tosavethechanges
Restart yourcomputertojointhe
workgroupthatyouhavespecified
34
Creating User Accounts and

Groups in MAC OS X
OpenSystemPreferences andclick
AccountsIcon
Click NewUserbutton
Selecttheaccesslevelforthisuserfrom
theNewAccount popupmenu
Enterthenameinthebothnametext
fields
Typethepassword forthenewaccount
Reenterthepasswordforconfirmation
SelecttheTurnOnFileVaultprotection
checkbox(optional)
Click CreateAccount tofinishcreate
theaccount
35
Creating User Accounts and

Groups in MAC OS X
EditinganAccount:
TheGuestAccount:
LaunchSystemPreferences,eitherbyclicking
theSystemPreferences iconintheDock,or
byselecting'SystemPreferences'fromthe
Applemenu
ClicktheAccounts icon,locatedintheSystem
areaoftheSystemPreferenceswindow
Clickthe lockiconinthebottomleftcorner.
Whenprompted,supplyyouradministrator
usernameandpassword
Fromthelistofaccounts,selectGuestAccount
PlaceacheckmarknexttoAllowgueststo
connecttosharedfolders
Clickthelock iconinthebottomleftcorner
GotoSystemPreferences Accountsand
selecttheaccountyouwanttochange
DeletinganAccount:
ChoosetheAppleicon System
Preferences
ClicktheAccountsicon,selecttheaccount
nametodelete,andthenclicktheminus
signbuttonbeneaththelist
NowMacaskswhattodowithallofthe
dearlydeparted'sfilesandsettings:
IfyouclicktheDeleteImmediatelybutton
thedocumentsaregoneforever
Ontheotherhand,ifyouclickOK,it
preservesthedeletedfoldersontheMacina
tidydigitalenvelope
36
Creating User
Accounts and Groups
in MAC OS X
GuestAccount
EditinganUserAccount
DeletinganUserAccount
37
Sharing Files and Folders in Macintosh OS X
GotoApplemenu SystemPreferencestoopenthe
systempreferencesprogram
ClicktheSharing icon
Inthelistofcheckboxes,turnonPersonalFileSharing
Changingaccesspermissionsforafileorfolder
Choose File GetInfo.WhentheInfodialogboxappears,
expandtheOwnership&Permissionspanel;thenexpand
the Detailssection
Thisdisplaysthreepopupmenus Owner,Groupand
Others
PermissionscontrolinMacOSX:
WhenconnectedtoaremoteMac:
Forexample,clickontheOwnerdropdownlistandspecify
theaccesspermission(readonly,writeonly,readand
write,ornoaccess)
AnAdministratoraccountholderseesthenamesof
eachdriveontheremoteMacaswellashisHome
folder.ByopeningupaMac'sharddrive,administrators
canviewalltheHomefoldersonthatMac
FinallyclickontheApply button
AStandardaccountholderseesonlythenamesofall
theHomefoldersontheremoteMacandhasfree
accessonlytohisownHomefolder.Inalltheother
Homefolders,hecanaccessonlythePublicfolder
AGuestaccountholderseesonlythenamesofall
HomefoldersontheremoteMac.IneachHomefolder,
allheseesisthePublicfolder
38
Printer Sharing in Macintosh OS X

Click Sharing fromthesystem
Preferences window
CheckthePrinterSharing optionto
enableit
Click Print &FaxIcon inthe
SystemPreferenceswindow
ClickAdd(+)button
ClickDefaultbutton fromthe
browserwindow
ClickSharedPrinteryouwantedto
useandthenclicktheAddbutton
39
Accessing Other Macs on Your

Network
ClickonGo andConnecttoServer inSnowLeopardmenu
EntertheIPaddress oftheserver
ClickConnect
40
Network Security Threats

Malware:
Chatclients:
Email,instantmessaging,andfilesharingprogramshave
traditionallybeenusedtospreadviruses,worms,backdoors,
rootkits,Trojans,andspywarefromcomputertocomputer
Chatclientsallowtheexchangeofexecutablecodethatmay
bemalicious
Beinganintermediaryforanotherattack:
Sniffing:
Intrudersusecompromisedcomputersaslaunchingpadsfor
attackingothersystems
UnsecurednetworkconnectionssuchasWiFiaccesspoints are
usedbyhackerstosetuppacketsnifferstomonitoralltraffic
thatcomesandgoestoanetwork
Backdoorandremoteadministrationprograms:
DenialofService:
BackOrifice,Netbus,andSubSevenarethetoolscommonly
usedbyintruderstoattackWindowscomputers
Denialofservicecausesthecomputertocrashortobecome
sobusyprocessingdatathatyoucannotuseit
Crosssitescripting:
Mobilecode(Java,JavaScript,andActiveX):
Amaliciouswebdevelopermayattachascripttosomething
senttoawebsite,suchasaURLthatistransferredtoyour
browserwhenthewebsiterespondstoyou
Intrudersusemobilecodetogatherinformationsuchasthe
websitesvisitedortorunmaliciouscodeonyourcomputer
Emailspoofing:
UnprotectedWindowsshares:
Anemailmessageappearstohaveoriginatedfromonesource
whenitactuallywassentfromanothersourcetotricktheuser
toexposesensitiveinformation
UnprotectedWindowsnetworkingsharescanbeexploitedby
intruderstoplacedistributedattacktoolsofWindowsbased
computersattachedtotheInternet
41
Module Flow
Homeand
Wireless
Networks
SettingUpa
Wireless
Network
Wireless
Network
Security
Usingthe
Networkwith
Windows7
Usingthe
Networkwith
MACOSX
Securing
Network
Connections
Network
Adapters
Troubleshooting
withNetwork
Adapters
42
Use Firewall
Afirewallisapartofthecomputer
system/networkthatisdesignedtoblock
unauthorizedaccess
Examplesofsoftwarefirewalls:
WindowsFirewall(checkSecuring
OperatingSystemsmodule)
Itcontrolstraffic comingintoandleaving
thesystembypermittingauthorized
communications
Ithidestheusershomenetwork from
theoutsideworld
Itcanbeeitherahardwareorsoftware
Personalfirewallsarerecommended
onallcomputers
Itmonitorsalltherequestscoming intothe
system,alertstheuser,andaskspermission
forallowing/blockingthem
NortonPersonalFirewall
McAfeePersonalFirewall
SunbeltPersonalFirewall
ZoneAlarm
Comodo PersonalFirewall
Internet
Firewall
Network
=Specifiedtrafficallowed
=Restrictedunknowntraffic
43
Use Antivirus Protection

Antivirussoftwareisusedtoprevent,detect,and
removemalware,includingcomputerviruses,worms,
andtrojanhorses
Theyoffer"realtime"protection forfilesandemails
astheyarereceived
AntiVirusshouldbeusedattheserver
Itshouldbeconfiguredtoscan:
Alltheworkstations
Completenetworkregularly
Allincomingandoutgoingtraffic
Emailattachments
Downloads
Browsing
44
Anti-Virus:
Screenshots
Kaspersky AntiVirus
AVGAntiVirus
NortonAntiVirus
45
Use Strong
Passwords
Passwordmustbesomethingthata
usercanrememberbutisnot
relatedtotheuser(suchasdateof
birth,maidenname,spousename,
etc.)
Astrongpasswordis8 10digits
longwithletters,numbers,and
characters(specialcharacterscanbe
used,butthepasswordshouldbe
easytoremember)
Useastrongpasswordforaccessing
alltheresources
Make Regular
Backups
Backupthedataregularly;ithelps
torestoredataduringsecurity
issues
Backupthesettingsand
configurationsoftherouterand
firewall
Createabootdiskbeforeasecurity
eventoccurs;ithelpsinrecovering
thesystemwhenitisdamagedor
compromised
Formoredetailsonhowtobackup
data,see:DataBackupandDisaster
Recoverymodule
2
46
Know about
Encryption
Encryptionistheconversionofdata
intoanunreadableformcalled
ciphertext;Unencrypteddatais
calledplaintext
Itprotectsthesensitiveinformation
thatistransmittedonline
Itistheeffectivewaytoachieve
datasecurity
Webbrowserswillencrypttext
automaticallywhenconnectedtoa
secureserver
3
Identify a Secure Website

Securedwebsitescanbeidentifiedif:
TheURLcontainshttps://
Thelock ispresentatthebottomrighthandsideofthebrowser
47
General Security Practices for Home

Networking
Useantivirussoftwareonallsystems
Turnoffthesystemordisconnectits
Ethernetinterfacewhennotinuse
Useapersonalfirewallsoftwarepackage
TurningoffJava,JavaScript,andActiveXwill
preventtheuserfrombeingvulnerableto
maliciousscripts(refer InternetSecurity
module)
Donotopentheemailattachmentscoming
fromanunknownsenderanddisable
scriptingfeaturesinemailprograms
Makeregularbackupsofcriticaldata
Neverrunaprogramunlessthe
sender/companyisatrustedsource
TheWindowsoperatingsystemcontainsan
optionto"Hidefileextensionsforknown
filetypes;disablethisoptioninorderto
havefileextensionsdisplayedbyWindows
Keepalltheapplicationsincludingthe
operatingsystempatched
Makeabootdisktorecoverthesystem
whenitisdamagedorcompromised
48
Module Flow
Homeand
Wireless
Networks
SettingUpa
Wireless
Network
Wireless
Network
Security
Usingthe
Networkwith
Windows7
Usingthe
Networkwith
MACOSX
Securing
Network
Connections
Network
Adapters
Troubleshooting
withNetwork
Adapters
49
Checking Network Adapter

GotoStart ControlPanel NetworkandSharingCenter
ClickNetworkandSharingCenter.MicrosoftWindows7displaysyourbasic
Networkconnections
Click ChangeAdapterSettings
50
Network Setup Wizard

GotoStart ControlPanel Network
andSharingcenter Setupanew
connectionornetwork Connectto
theInternet Next
ClickSetupanewconnectionanyway
clickNext
SelecttheconnectiontypeintheHowdo
youwanttoconnect wizardandclick
Next
EnterUserName,Password,and
InternetServiceProvider (ISP)
Typetheconnectionnameandcheck
Allowotherpeopletousethis
connection, Click Connect
51
Network Setup Wizard

Ifconnectedsuccessfully,thewindowwilldisplayTheconnectiontotheInternetisreadytouse
clickClose
ClickYes torestartthecomputer
52
How to Isolate Networking Problems

(Windows 7): Network Adapter?
GotoStart ControlPanel
ClickNetworkandSharingCenter
Click ChangeAdapterSettings
IntheNetworkConnectionsWindow,
examinethestatusofthenetworkadapter
53
Network Adapter Status

EnabledLAN
DisabledLAN
UnpluggedLAN
NotConnectedWirelessLAN
54
Module Flow
Homeand
Wireless
Networks
SettingUpa
Wireless
Network
Wireless
Network
Security
Usingthe
Networkwith
Windows7
Usingthe
Networkwith
MACOSX
Securing
Network
Connections
Network
Adapters
Troubleshooting
withNetwork
Adapters
55
Network Adapter is Unplugged

Verifythatbothendsofthenetworkcableareproperlyconnected
Ifthecableisproperlyconnected,verifythatthemodemand
routerarepluggedinandturnedon
Iftheuserhasmorethanonenetworkportavailableintherouter,plug
thecableintoadifferentport.Ifthenetworkconnectionworks,thenthe
originalportontherouterisfaulty
Replacethenetworkcablewithanewcable.Youmighthavea
faultynetworkcable
Thenetworkadapteronthesystemmighthavefailed
56
Network Adapter Has Limited or No Connectivity

IntheNetworkConnections
window,rightclickthe
NetworkAdapter,and
thenclickRepair
Iftheuserisusinga
router,unplugthe
networkcable that
connectsthemodem
totherouterandconnectthecomputer
directlytothemodem.Now,restartthe
computer.Ifthecomputerconnects
properlyafterrestarting,theproblem
iswiththerouter
Unplugthemodem
Iftheuserisunsurewhichdevicemight
bethemodem,itisthedevicethatis
connecteddirectlytothephoneline(if
theuserhasDSL)orcableconnection
Iftheuserhasarouterconnectedtothe
modem,itshouldbeunpluggedand
thenpluggedinaftersometime
Iftheproblempersists,contactthe
Internetserviceprovider(ISP)for
support
Whenthereislimitedornoconnectivity,
itmaybedueto:
Restart thesystem
Ifthenetworkadapterstillshows
"Limitedornoconnectivity"andtheuser
hascustomizedtherouter'sconfiguration,
verifythattherouterhasDHCP(Dynamic
HostConfigurationProtocol)enabled
FailedInternetconnection
Misconfiguredrouter
Misconfigurednetworkadapter
EnableDHCP andthenrestartthesystem
57
Network Adapter is Connected, but User

Cannot Reach the Internet
1
FirstcheckwhetherornotInternetisaccessible;checkforsome
websitessuchaswww.microsoft.com,www.eccouncil.org
Unplugthemodem,waitaminute,andthenplugthemodembackin
Iftherouterisconnectedtothemodem,unplugitandreconnectit
afteraminute
Restartthecomputer
IftheuserhasconfiguredthesystempreviouslywithastaticIP
address,he/sheprobablymayneedanautomaticIPaddressathome
58
Module Summary
Afirewallisapartofacomputersystemornetworkthatisdesignedtoblock
unauthorizedaccess
Arouteractsasashieldtothenetworkandmanagesallcommunication
Wirelessnetworksareusedtoconnectthecomputerstoeachotherwithoutanycables
Eavesdropping,datainterceptionandmodification,denialofservice,spoofing,freeloading,
rogueWLANsarethecommonthreatstothewirelessnetwork
WindowsEasyTransferhelpsintransferringpersonalfiles,email,data,files,media,and
settingsfromanoldcomputertoanewone
Sniffing,malware,emailspoofing,chatclients,crosssitescripting,unprotectedWindows
shares,mobilecodearesomeofthenetworksecuritythreats
Securenetworkconnectionsusingfirewall,antivirus,usingstrongpasswords,regular
backups,encryptionetc.
59
Network Security Checklist

Scheduleregularbackupsofthedatafiles
Changenetworkdevicepasswordsregularly
Regularlyupdatetheoperatingsystemandothersoftwarewiththelatest
patches
Blockallaccesstothenetworkinfrastructurefromtheoutside
Runperformancemonitoringsoftwaretoreceivealertsifsomethingabnormal
happensontheserversorthenetwork
Installantivirussoftwareonallworkstations
Configureserverstoscanbothincomingandoutgoingfiles
Scanallincomingandoutgoingemailandattachments
60

CSCU Module 07 Securing Network Connections PDF

Caricato da

Informazioni sul documento

Descrizione originale:

Titolo originale

Copyright

Formati disponibili

Condividi questo documento

Condividi o incorpora il documento

Opzioni di condivisione

Hai trovato utile questo documento?

Questo contenuto è inappropriato?

Copyright:

Formati disponibili

CSCU Module 07 Securing Network Connections PDF

Caricato da

Copyright:

Formati disponibili

Securing Network Connections

PlayStation Network Security Breach

Steps for Home Networking

Setting Up a Wireless Network in Windows 7

Changing Wireless Networking

Changing Wireless Networking

Changing Wireless Networking

Setting Up a Wireless Network in

Changing Wireless Networking

Common Threats to Wireless Network

Securing Wireless Network

Disableorturnoff SSIDbroadcast forthenetwork asitmakesthenetworkinvisibletotheattackers

Securing Wireless Networks

Setting Up the PCs Name and Workgroup

Simple File Sharing in Windows 7

Simple File Sharing in Windows 7

Simple File Sharing in Windows 7

Hiding a Shared Disk or Folder

How to Share Printer in Windows 7?

Using Printers on Other PCs

Accessing Files on Other PCs

Windows Easy Transfer

Setting Up the PCs Name in MAC OS X

Setting Up the Workgroup Name

Creating User Accounts and

Creating User Accounts and

Sharing Files and Folders in Macintosh OS X

Printer Sharing in Macintosh OS X

Accessing Other Macs on Your

Network Security Threats

Use Antivirus Protection

Identify a Secure Website

General Security Practices for Home

Checking Network Adapter

Network Setup Wizard

Network Setup Wizard

How to Isolate Networking Problems

Network Adapter Status

Network Adapter is Unplugged

Network Adapter Has Limited or No Connectivity

Network Adapter is Connected, but User

Network Security Checklist

Potrebbero piacerti anche