Network Attacks and Defenses: A Hands-On Approach

ISBN-13: 9781138374713 / Angielski / Miękka / 2018 / 475 str.

Zouheir Trabelsi;Kadhim Hayawi;Arwa Al Braiki

Opis

The attacks on computers and business networks are growing daily, and the need for security professionals who understand how malfeasants perform attacks and compromise networks is a growing requirement to counter the threat. Network security education generally lacks appropriate textbooks with detailed, hands-on exercises that include both offensive and defensive techniques. Using step-by-step processes to build and generate attacks using offensive techniques, Network Attacks and Defenses: A Hands-on Approach enables students to implement appropriate network security solutions within a laboratory environment.Topics covered in the labs include:Content Addressable Memory (CAM) table poisoning attacks on network switchesAddress Resolution Protocol (ARP) cache poisoning attacksThe detection and prevention of abnormal ARP trafficNetwork traffic sniffing and the detection of Network Interface Cards (NICs) running in promiscuous modeInternet Protocol-Based Denial-of-Service (IP-based DoS) attacksReconnaissance trafficNetwork traffic filtering and inspectionCommon mechanisms used for router security and device hardeningInternet Protocol Security Virtual Private Network (IPsec VPN) security solution protocols, standards, types, and deploymentsRemote Access IPsec VPN security solution architecture and its design, components, architecture, and implementationsThese practical exercises go beyond theory to allow students to better anatomize and elaborate offensive and defensive techniques. Educators can use the model scenarios described in this book to design and implement innovative hands-on security exercises. Students who master the techniques in this book will be well armed to counter a broad range of network security threats.

Spis treści

Switch’s CAM Table Poisoning Attack. ARP Cache Poisoning-Based MiM and DoS Attacks. Abnormal ARP Traffic Detection and Prevention. Network Traffic Sniffing and Promiscuous Mode Detection. IP-Based Denial-of-Service Attacks. Reconnaissance Traffic. Packet Filtering and Inspection. Router Security. Site-to-Site VPN Tunnel Implementation against Eavesdropping Attacks. Remote Access VPN Tunnel Implementation against Eavesdropping Attacks. Index.

O autorze

Zouheir Trabelsi and Kadhim Hayawi are with United Arab Emirates University.