Downloaded 56 times
Uploaded bySyed Ubaid Ali Jafri
LAN Security
The document discusses the importance of Local Area Network (LAN) security, outlining its definition, functionalities like file sharing and messaging, and the necessity for security measures to combat various threats including man-in-the-middle attacks and denial-of-service attacks. It emphasizes countermeasures such as denying unusable services, monitoring connected devices, and modifying operating system defaults to minimize risks. Additionally, it suggests performance evaluation practices like customizing Windows services and registry settings to enhance overall system security and efficiency.
More Related Content
LAN Security
- 1. LAN SECURITY BY SYED UBAIDALI JAFRI Information Security Expert CEO UJ Consultant & Solution Provider http://www.ujconsultant.com
- 2. CONSIDERATIONS •INTRODUCTION TO LAN •WHATTO KNOW ABOUT LAN •WHY SECURITY? •THREATS •COUNTERMEASURMENT •MINIMIZING RISK •EVALUATE PERFORMANCE
- 3. INTRODUCTION TO LAN Anynetwork that is connected on a same subnets lies under the category of LAN LAN Share resources of computer which includes: 1) File Sharing 2) Voice chatting 3) Message Sending 4) Desktop Sharing
- 4. WHAT TO KNOWABOUT LAN •Information about host •Devices that are connected on the subnet •IP Address of the system •Remote Services •Events Logs
- 5. WHAT TO KNOWABOUT LAN Information about host
- 6. WHAT TO KNOWABOUT LAN Devices that are connected on the subnet
- 7. WHAT TO KNOWABOUT LAN IP Address of the system
- 8. WHAT TO KNOWABOUT LAN Remote Services
- 9. WHY SECURITY Any mediumwhether it is wired or wireless must have some strong security consideration. Using LAN, security can be helpful for the user who have a large network connected on a LAN, they must go through the process of analysis that interacts with LAN
- 10. THREATS Following are thelist of threats that a LAN Network faces: •MAN IN THE MIDDLE ATTACK •SMURF ATTACK •IP SPOOFING •DENIAL OF SERVICES •ARP POISONING
- 11. THREATS MAN IN THEMIDDLE ATTACK: The man-in-the middle attack intercepts a communication between two systems.
- 12. THREATS SMURF ATTACK The Smurfattack is a way of generating significant computer network traffic on a victim network.
- 13. THREATS IP SPOOFING IP addressspoofing or IP spoofing refers to the creation of Internet Protocol (IP) packets with a forged source IP address, called spoofing.
- 14. THREATS DENIAL OF SERVICES Adenial-of-service attack (DoS attack) or distributed denial-of-service attack (DDoS attack) is an attempt to make a computer or network resource unavailable to its intended users
- 15. THREATS ARP POISONING ARP spoofingmay allow an attacker to intercept data frames on a LAN, modify the traffic, or stop the traffic altogether
- 16. COUNTERMEASUREMENTS •Denying Unusable services •Checkingpeople currently connect with this network •Closing Default operators of windows •Saving external resources •Making Log files •Updated Virus Definitions
- 17. COUNTERMEASUREMENTS Denying Unusable services RUN>Services.msc Closethese services Automatic Updates Live Update Telnet
- 18. COUNTERMEASUREMENTS Checking people currentlyconnect with this network
- 19.
- 20. COUNTERMEASUREMENTS HKLMSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer Operating system Defaultsetting Windows 7 0x91 Windows Server 2008 0x91 Windows Vista 0x91 Windows Server 2003 0x95 Windows XP 0x91 Windows 2000 0x95 Windows 95/98 0x95
- 21. COUNTERMEASUREMENTS Making Log files RUN> eventvwr
- 22. MINIMIZING RISK •Making RemoteConnectivity disabled •Services Like Telnet, SSH, VNC should be stopped forcefully •Changing Values from Registry •Releasing and Renewing IP Addresses
- 23. MINIMIZING RISK •Services LikeTelnet, SSH, VNC should be stopped forcefully •Net stop telnet •Net start telnet
- 24. MINIMIZING RISK •Releasing andRenewing IP Addresses: •Ipconfig /release •Ipconfig /renew
- 25. EVALUATE PERFORMANCE By DefaultWindows Xp, 7 , Vista enble the services that are not used under he scope of a home user Operating system performance can be cutomized from 1) Windows Services. 2) Windows Registry 3) Windows Effects 4) Monitoring Services
- 26.