system and network monitoring tools

... DOES THE WEB APPLICATION  REQUIRE AUTHENTICATION OF THE  USER?  Many Web applications require another server  authenticate users  Examine how information is passed between the  two servers  Encrypted channels  Verify that logon and password information is  stored on secure places  Authentication servers introduce a second target 44 37 34 APPLICATION VULNERABILITIES  COUNTERMEASURES (CONTINUED)  Top­10 Web application vulnerabilities (continued)  Remote administration flaws  Attacker can gain access to the Web server through the  remote administration interface  Web and application server misconfiguration  Any Web server software out of the box is usually vulnerable  to attack  Default accounts and passwords  Overly informative error messages 32 16 WEB FORMS  Use the <form> element or tag in an HTML document  Allows customer to submit information to the Web server  Web servers process information from a Web form by  using a Web application  Easy way for attackers to intercept data that users  submit to a Web server 7 APPLICATION VULNERABILITIES  COUNTERMEASURES  Open Web Application Security Project (OWASP)  Open, not­for­profit organization dedicated to finding  and fighting vulnerabilities in Web applications  Publishes the Ten Most Critical Web Application  Security Vulnerabilities  Top­10 Web application vulnerabilities  Unvalidated parameters  HTTP requests are not validated by the Web server  Broken access control  Developers implement access controls but fail to test them  properly 29 USING SCRIPTING LANGUAGES  Dynamic Web pages can be developed using scripting  languages  VBScript  JavaScript  PHP 18 OPEN DATABASE CONNECTIVITY  (ODBC) (CONTINUED)  ODBC defines  Standardized representation of data types  A library of ODBC functions  Standard methods of connecting to and logging on to a  DBMS 24 WEB APPLICATION COMPONENTS  Static Web pages  Created using HTML  Dynamic Web pages  Need special components  <form> tags  Common Gateway Interface (CGI)  Active Server Pages (ASP)  PHP  ColdFusion  Scripting languages  Database connectors 6 APACHE WEB SERVER  Tomcat Apache is another Web Server program  Tomcat Apache hosts anywhere from 50% to 60% of all  Web sites  Advantages  Works on just about any *NIX and Windows platform  It is free  Requires Java 2 Standard Runtime Environment (J2SE,  version 5.0) 15 ON WHAT PLATFORM WAS THE WEB  APPLICATION DEVELOPED?  Several different platforms and technologies can  be used to develop Web applications  Attacks differ depending on the platform and technology used to develop the application  Footprinting is used to find out as much information  as possible about a target system  The more you know about a system the easier it is to  gather information about its vulnerabilities 45 OPEN DATABASE CONNECTIVITY  (ODBC)  Standard database access method developed by  the SQL Access Group  ODBC interface allows an application to access  Data stored in a database management system  Any system that understands and can issue ODBC  commands  Interoperability among back­end DBMS is a key  feature of the ODBC interface 23 48 UNDERSTANDING WEB APPLICATIONS  It is nearly impossible to write a program without bugs  Some bugs create security vulnerabilities  Web applications also have bugs  Web applications have a larger user base than standalone  applications  Bugs are a bigger problem for Web applications 5 DOES THE WEB APPLICATION  CONNECT TO A BACKEND DATABASE  SERVER? (CONTINUED)  Basic testing should look for  Whether you can enter text with punctuation marks  Whether you can enter a single quotation mark followed by  any SQL keywords  Whether you can get any sort of database error when  attempting to inject SQL 43 DOES THE WEB APPLICATION USE  DYNAMIC WEB PAGES?  Static Web pages do not create a security  environment  IIS attack example  Submitting a specially formatted URL to the  attacked Web server  IIS does not correctly parse the URL  information  Attackers could launch a Unicode exploit http://www.nopatchiss.com/scripts/ ... %255cwinnt /system3 2/cmd.exe?/c+dir+c  Attacker can even install a Trojan program 41 9 OBJECT LINKING AND EMBEDDING  DATABASE (OLE DB)  OLE DB is a set of interfaces  Enables applications to access data stored in a DBMS  Developed by Microsoft  Designed to be faster, more efficient, and more stable  than ODBC  OLE DB relies on connection strings  Different providers can be used with OLE DB  depending on the DBMS to which you want to  connect 25 17 TOOLS OF WEB ATTACKERS AND SECURITY TESTERS  Choose the right tools for the job  Attackers look for tools that enable them to attack  the system  They choose their tools based on the vulnerabilities  found on a target system or application 46 3 H a n d s - O n ... DOES THE WEB APPLICATION  REQUIRE AUTHENTICATION OF THE  USER?  Many Web applications require another server  authenticate users  Examine how information is passed between the  two servers  Encrypted channels  Verify that logon and password information is  stored on secure places  Authentication servers introduce a second target 44 37 34 APPLICATION VULNERABILITIES  COUNTERMEASURES (CONTINUED)  Top­10 Web application vulnerabilities (continued)  Remote administration flaws  Attacker can gain access to the Web server through the  remote administration interface  Web and application server misconfiguration  Any Web server software out of the box is usually vulnerable  to attack  Default accounts and passwords  Overly informative error messages 32 16 WEB FORMS  Use the <form> element or tag in an HTML document  Allows customer to submit information to the Web server  Web servers process information from a Web form by  using a Web application  Easy way for attackers to intercept data that users  submit to a Web server 7 APPLICATION VULNERABILITIES  COUNTERMEASURES  Open Web Application Security Project (OWASP)  Open, not­for­profit organization dedicated to finding  and fighting vulnerabilities in Web applications  Publishes the Ten Most Critical Web Application  Security Vulnerabilities  Top­10 Web application vulnerabilities  Unvalidated parameters  HTTP requests are not validated by the Web server  Broken access control  Developers implement access controls but fail to test them  properly 29 USING SCRIPTING LANGUAGES  Dynamic Web pages can be developed using scripting  languages  VBScript  JavaScript  PHP 18 OPEN DATABASE CONNECTIVITY  (ODBC) (CONTINUED)  ODBC defines  Standardized representation of data types  A library of ODBC functions  Standard methods of connecting to and logging on to a  DBMS 24 WEB APPLICATION COMPONENTS  Static Web pages  Created using HTML  Dynamic Web pages  Need special components  <form> tags  Common Gateway Interface (CGI)  Active Server Pages (ASP)  PHP  ColdFusion  Scripting languages  Database connectors 6 APACHE WEB SERVER  Tomcat Apache is another Web Server program  Tomcat Apache hosts anywhere from 50% to 60% of all  Web sites  Advantages  Works on just about any *NIX and Windows platform  It is free  Requires Java 2 Standard Runtime Environment (J2SE,  version 5.0) 15 ON WHAT PLATFORM WAS THE WEB  APPLICATION DEVELOPED?  Several different platforms and technologies can  be used to develop Web applications  Attacks differ depending on the platform and technology used to develop the application  Footprinting is used to find out as much information  as possible about a target system  The more you know about a system the easier it is to  gather information about its vulnerabilities 45 OPEN DATABASE CONNECTIVITY  (ODBC)  Standard database access method developed by  the SQL Access Group  ODBC interface allows an application to access  Data stored in a database management system  Any system that understands and can issue ODBC  commands  Interoperability among back­end DBMS is a key  feature of the ODBC interface 23 48 UNDERSTANDING WEB APPLICATIONS  It is nearly impossible to write a program without bugs  Some bugs create security vulnerabilities  Web applications also have bugs  Web applications have a larger user base than standalone  applications  Bugs are a bigger problem for Web applications 5 DOES THE WEB APPLICATION  CONNECT TO A BACKEND DATABASE  SERVER? (CONTINUED)  Basic testing should look for  Whether you can enter text with punctuation marks  Whether you can enter a single quotation mark followed by  any SQL keywords  Whether you can get any sort of database error when  attempting to inject SQL 43 DOES THE WEB APPLICATION USE  DYNAMIC WEB PAGES?  Static Web pages do not create a security  environment  IIS attack example  Submitting a specially formatted URL to the  attacked Web server  IIS does not correctly parse the URL  information  Attackers could launch a Unicode exploit http://www.nopatchiss.com/scripts/...

... and re- near the grammatical end of the continuum are called grammatical morphemes. Note that grammatical morphemes include forms that we can consider to be words like the, a, and, and of and ... of all, we should understand deeply about its morpheme system. Living in a community, human beings need a tool to communicate with each other, and to carry on human and social affairs. They, ... also play an 17 English morpheme system Luong Thuan & Kim Phuong • First, both English morphemes and Vietnamese morphemes are the smallest unit of language and can not be divided into smaller...

... Linux ext2 Kiểu filesystem đợc dùng chủ yếu trên Linux partition. iso9660 Kiểu ISO 9660 filesystem đợc dùng với CD-ROM disks. sysv Kiểu Nhằm hỗ trợ cho dạng UNIX System V filesystem. msdos ... dới Linux systems: # # Sample /etc/fstab file for a Linux machine # # Local mounts /dev/sda1 / ext2 defaults 1 1 mkswap /dev/hda2 2. Mounting and unmounting file systems Mounting file systems Nh ... Bỏ mount một hệ thống file (điểm mount). I. File System and Disk Administration 1. Cấu trúc th mục trên Unix / - Th mục gốc trên UNIX file system. /bin - Là symbol link tới /usr/bin chứa các...

... compatibility and advanced interoperation. CHAPTER 12 ■ THE F# TOOL SUITE AND .NET PROGRAMMING TOOLS 322 7575Ch12.qxp 4/27/07 1:07 PM Page 322 The F# Tool Suite and .NET Programming Tools T his ... programming tools, both those that are distributed with F# and those that target .NET in general. The F# distribution includes two versions of the compiler and a number of other tools. These ... resource files. The .NET file format is much easier to understand and work with, and also Visual Studio provides some nice resource management tools. It is also much easier to localize your applications,...

... solaris dùng lệnh newfs), mkswap tạo swap file system. Ví dụ mke2fs /dev/hda1 mkswap /dev/hda2 3. Mounting and unmounting file systems Mounting file systems Như ta đ biêt hệ thống file của UNIX ... của người sử dụng. ỹ Số trang đ in. VIII. File System and Disk Administration 1. Cấu trúc thư mục trên Unix ỹ / - Thư mục gốc trên UNIX file system. ỹ /bin - Là symbol link tới /usr/bin chứa ... recover bởi fsck. 2. Creating file systems Giới thiệu về UNIX- Một số thao tác cơ bản trên UNIX 77 ỹ sysv Kiểu Nhằm hỗ trợ cho dạng UNIX System V filesystem. ỹ msdos Kiểu DOS partition...

... configure and manage the main network components and network configuration of the server. Chapter 14 covers client side configuration. You will learn about the main network components and configuration ... termination D. Aborted termination 62. What does OSI stand for? A. Oracle Standard Implementation B. Oracle System Information C. Open Standard Interconnection D. Open Systems Interconnection Copyright ©2000 ... basic network architecture. You will learn about the areas to consider when designing and implementing an Oracle network. You will also be introduced to the standard features of Oracle8i Net8 and...

... a regular file. r, w, and x meaning user readable, user writable, and user r, w, and x meaning group readable, group writable and group r, w, and x meaning world readable, world writable, and world pureftpd ... here. Using ping and arp from the Command Line In chapter 9, we looked at the ping and arp commands. These are available from the web interface but they are also available from the command line. To ... operating system that is a specialized software to control and manage the different resources in the computer including memory, video, networking, and hard disks. Some popular operating systems...

... configure Nagios. CHAPTER 6 N NETWORK MONITORING 159 The last options from the Monitoring section that I want to cover here are Service Problems, Host Problems, and Network Outages. Each of these ... small example network in which four Linux servers are used. Three of these are on the internal network, and one of them is on the Internet. Nagios can monitor other operating systems as well, ... N NETWORK MONITORING 132 +ap_+j]ceko.+dpl]oos`*qoano , but this file is not created automatically. The following command creates it for you, puts a user with the name j]ceko]`iej in it, and...

... custody and legal reasons, event filtering, and event notification via e-mail and pager for specified events. Syslog uses a combination of facilities and severities to identify the source and type ... a server and a client component. The client typically runs on the firewall itself; the server is installed on a Windows, Linux, or UNIX host. Syslog server functionality on Linux and UNIX is ... Logging and Log-Analysis Tools Most firewalls can log events related to traffic that has been permitted or denied....

... of a system should be open and available. This allows users to adapt and make optimal use of the system and provides a review process, giving users more input into the operation of the network. ... including tools for custom packet generation and load testing. The chapter concludes with a brief discussion of emulation and simulation tools. You probably will not use these tools frequently and ... impact on how you approach problems in general and the use of tools in particular. It will determine which tools you can use, how you can use the tools, and, most important, what you can do with...

... Each office uses a standard user account and password for all servers in that office. Network administrators in each office know the user account and password combination. Network administrators ... of the bandwidth used between the Chicago and New York offices. Bandwidth utilization between these two offices is currently cause for concern. Network traffic between the Chicago and New York ... level of availability and reduced latency between the New York and Boston offices is required. Bandwidth utilization between the Boston and New York offices is minimal and is not a concern in...