Know Your Enemy II : Attack Prevention

Attack Prevention » Intrusion Detection » Honeypots » Know Your Enemy II

Know Your Enemy II

Details

Submitted: 05/14/10 (Edited 05/14/10)
Views: 5 views, 0 incoming clicks. Averaging 0 views and 0 incoming clicks per day.
In the most recent 30 day period, there've been 0 views and 0 incoming clicks.
Rating: 0/5 based on 0 votes. The median rating is 0.

Know Your Enemy II

Description: This article is the second of a series of articles. In the first article, Know Your Enemy, we covered the tools and methodologies of the Script Kiddie. Specifically, how they probe for vulnerabilities and then attack. The third papercovers what script kiddies do once they gain root. Specifically, how they cover their tracks and what they do next. This, the second paper, will cover how to track their movements. Just as in the military, you want to track the bad guys and know what they are doing. We will cover what you can, and cannot determine, with your system logs. You may be able to determine if you are being probed, what you were being probed for, what tools were used, and if they successful. The examples provided here focus on Linux, but can apply to almost any flavor of Unix. Keep in mind, there is no guaranteed way to track the enemy"s every step. However, this article is a good place to start.
Read More

Discussion: 0 comments

Tags:

Sorry, you don't have permission to post. Log in, or register if you haven't yet.

Please login or register.

Members currently reading this thread:

Discussion (0) Report

Report