MIS-5211 Week 5 Reading Summary, Question, and recent Cyber Security News…

MIS-5211 Week 5 Readings, Question, and recent Cyber Security News…

1. Summarize one key point from each assigned reading…

1A. “System enumeration” (footprinting) – is the process by hackers and/or security administrators of gathering cyber info (profile of computer systems, users, network, etc.) for vulnerability access. The best defense for online businesses is an evolving holistic approach (integrated & layered security protection setup [policy, procedures, awareness, technology, etc.] that changes over time.)

1B. “User enumeration” – regarding enumeration of networked servers (identify user accounts & net resources [shared directories]), one must use different/similar internal & external command utilities & installed apps on Windows & UNIX servers when gathering this information.

Windows system examples: “net user” internal command utility (enumerate users)

UNIX system examples: “finger” internal command utility (enumerate users & hosts)

2. Question to classmates (facilitates discussion) from assigned reading…

Regarding online systems enumeration (identify user accounts & net resources [shared directories]) on networked Windows servers, what is the one way to hide shared networked directories?

*Answer is the following: use the “ $ ” keyboard character at end of shared net directory name (example… ftp$ )

3. Identify, read, and post to our blog a current event article regarding ethical hacking & penetration testing (follow theme topic of the week, or other interesting related article)…

In the Cyber Security News lately…

Security Bug allows Hackers to take Control of Curiosity Rover’s OS…

http://www.ehackingnews.com/2015/09/security-bug-allows-hackers-to-take.html

… “Serious security flaws has been discovered in VxWorks, a real-time operating system made by Wind River of Alameda, California, US, in 1987. The OS is used from network routers to critical instruments like NASA’s Curiosity Rover on Mars and Boeing 787 Dreamliners.”