Internet security attacks at the basic levels

ABSTRACT

The Internet put the rest of the world at the reach of our computers. In the same way it also made our computers reachable by the rest of the world. Good news and bad news!. Over the last decade, the Internet has been subject to widespread security attacks. Besides the classical terms, new ones had to be found in order to designate a large collection of threats: Worms, break-ins, hackers, crackers, hijacking, phrackers, spoofing, man-in-the-middle, password-sniffing, denial-of-service, and so on.Since the Internet was born of academic efforts to share information, it never strove for high security measures. In fact in some of its components, security was consciously traded for easiness in sharing. Although the advent of electronic commerce has pushed for "real security" in the Internet, there is yet a huge amount of users (including scientists) very vulnerable to attacks, mostly because they are not aware of the nature (and ease) of the attacks and still believe that a "good" password is all they need to be concerned about.We wrote this paper aiming for a better understanding of the subject. In the paper we report some of the major actual known attacks. Besides the description of each attack (the what), we also discuss the way they are carried on (the how) and, when possible, the related means of prevention, detection and/or defense.

REFERENCES

• 1: Abraham Siberschatz , Peter B. Galvin, Operating System Concepts, 4th Ed., Addison-Wesley Longman Publishing Co., Inc., Boston, MA, 1993
• 2: C. H. Bennett, G. Brassard, A. K. Ekert, Quantum Cryptography. Scientific American, v. 267, n.4, 1992, pp. 50-57.
• 3: Bruce Schneier, Applied Cryptography. Wiley, Second Edition, 1996, pp. 554-557.
• 4: William Stallings, Network and internetwork security: principles and practice, Prentice-Hall, Inc., Upper Saddle River, NJ, 1995
• 5: W. Richard Stevens, TCP/IP illustrated (vol. 1): the protocols, Addison-Wesley Longman Publishing Co., Inc., Boston, MA, 1993
• 6: D. Comer, Internetworking with TCP/IP Vol. 1. Prentice Hall, Third Edition, 1995.
• 7: Andrew S. Tanenbaum, Computer Networks, Prentice Hall PTR, Upper Saddle River, NJ, 1985
• 8: ISS Sniffer FAQ. http://www.iss.net/.
• 9: D. Atkins et al.,Internet Security. New Riders, 1996, pp. 258-279.
• 10: Simson Garfinkel , Deborah Russell, PGP: Pretty Good Privacy, O'Reilly & Associates, Inc., Sebastopol, CA, 1996
• 11: SSL Version 3.0. http://home.netscape.com/eng/ssl3/ssl-toc.html.
• 12: N. Haller, The S/KEY One-Time Password System. RFC 1760, Bellcore, February 1995.
• 13: J. Kohl, C. Neuman, The Kerberos Network Authentication Service (V5). RFC 1510, September 1993.
• 14: Project Loki. Phrack Magazine, Volume Seven, Issue Forty-Nine, File 06. Whitepaper by [e-mail] for Phrack Magazine. Guild Productions, August 1996.
• 15: D. C. Plummer, An Ethernet Address Resolution Protocol. RFC 826, 1982.
• 16: D. Atkins et al.,Internet Security. New Riders, 1996, pp. 257-316.
• 17: W. Richard Stevens, TCP/IP illustrated (vol. 1): the protocols, Addison-Wesley Longman Publishing Co., Inc., Boston, MA, 1993
• 18: A. S. Tanenbaum, Computer Networks. Prentice Hall, 3rd. ed., 1996, pp. 355-359.
• 19: C. Hedrick, Routing Information Protocol. RFC 1058, 1988.
• 20: Karanjit S. Siyan , Chris Hare, Internet Firewalls and Network Security, New Riders Publishing, Thousand Oaks, CA, 1996
• 21: IP-spoofing Demystified. By [e-mail] Guild Productions, June 1996.
• 22: R. Morris, A Weakness in the 4.2 BSD UNIX TCP/IP Software. Computing Science Technical Report 117. AT&T Bell Laboratories, 1985.
• 23: L. Joncheray, A Simple Active Attack Against TCP. Merit Network, Inc. [e-mail], April 1995.
• 24: IP Spoofing Attacks and Hijacked Terminal Connections. CERT Advisory CA-95:01. Available at http://www.cert.org and at ftp://info.cert.org/pub/cert_advisories/ 1995.
• 25: Simson Garfinkel , Gene Spafford, Practical Unix and Internet security (2nd ed.), O'Reilly & Associates, Inc., Sebastopol, CA, 1996
• 26: TCP SYN Flooding and IP Spoofing Attacks. CERT Advisory CA-96.21. Available at http://www.cert.org and at ftp://info.cert.org/pub/cert_advisories/ 1996.

INDEX TERMS

Keywords:
Client-Server, Covert Channel, DNS, Denial of Service, Ethernet, Hijacking, ICMP, Kerberos, One-Time Password, Ping, RIP, Sniffing, Spoofing, TCP/IP