Designing Countermeasures For Tomorrows Threats

Theoritical SectionPractical Section

Designing Countermeasures For TomorrowsThreats

Darwish Ahmad Herati

Herat UniversityComputer Science Faculty

Communication & Operatin System Department

SUPERVISORM.C.S. M. Sawaby Nezhat

December 21, 2014

Darwish Ahmad Herati Designing Countermeasures

Contents

1 Theoritical SectionIntroductionComputer And Network SecurityHoneypot SystemsHoneynet Systems

2 Practical SectionCountries and Honeynet SystemsOrganizations and Honeynet SystemsThesis Solution

IntroductionComputer And Network SecurityHoneypot SystemsHoneynet Systems

Problem Statement

1st: AFG Ministries2nd: Organizations3rd: Airports4th: Universities5th: Banks

Problem Statement

We Need To Learn :Who is Attacking Us.How We Are Being AttackedWhat the Attackers Trying to Achieve.

Motivation

Secure Afghanistan Internal NetworksRecognize the Enemies of Afghanistan and Their ActionsShow Our Ability to The OthersHow to Defend Against the Attackers.

Network Security SpecialistLearning New Types, Tactics of Attacks

Lough to the Attackers :-)

Motivation

1st: IDEA2nd: Info Gathering3rd: Todays Technos4th: Implementation5th: Best Solution

Thesis Structure

Chapter 1: IntroductionChapter 2: Computer and Network SecurityChapter 3: Honeypot SystemsChapter 4: Honeynet SystemsChapter 5: Honeypot and Honeynet TechnologiesChapter 6: Implementation ( Designing CountermeasruesFor Tomorrows Threats )

Zero Concept

Zero Hour,Day: Attacks, Threats and VulnerabilitiesSecurity Hole Unknown to its VendorExploit Unknown Vulnerability and the patch is no available

Honeypot Systems

Definition: A computer or network that is intentially leftwith common vulnerabilities that a hacker would use tohack the system, act as a TRAP!!!History: Fred Cohen’s Deception ToolKit in 1998 And in2004 Virtual Honeypot IntroducedValue: Data Collection=Little Data High Value

Honeypot Systems

Definition: A computer or network that is intentially leftwith common vulnerabilities that a hacker would use tohack the system, act as a TRAP!!!History: Fred Cohen’s Deception ToolKit in 1998 And in2004 Virtual Honeypot IntroducedValue: Data Collection=Little Data High Value

Classification of Honeypot Systems

Honeynet Systems

Definition: Multiple honeypots can be set on a network toform the Honeynet Systems

Honeynet Systems

Definition: Multiple honeypots can be set on a network toform the Honeynet Systems

Countries and Honeynet SystemsOrganizations and Honeynet SystemsThesis Solution

Countries and Honeynet Systems

1st: IRAN2nd: PAKISTAN3rd: INDIA4rd: SAUDI ARABIA5rd: POLISH6rd: GERMANY

Organizations and Honeynet Systems

1st: THE HONYNETPROJECT2nd: THE NORSE3rd: THE FIREEYE4th: THE GLOBALBOTNET5th: THE WORLD MAP6th: THE KASPRESKY

Implement Different Technologies

Open Source: Honeyd, KippoSSH, Dionaa, Conpot,Honeywall, etc...Close Source: BackOfficer Friendly, Spectir, HoneyBot,etc...This Thesis: Honeyd, KippoSSH, Dionaa, Conpot,BackOfficer Friendly, Spectir,

Let’s See The Implementation of Them. But Before!!!

Used Technologies

LAMP: Apache 2, PHP, MySQLPython: Powerful Scripting Language

We Love AFGHANISTAN and Proud To Be Afghans

Solution for AFGHANISTAN

Conclusion

The Network Security Problems In Everywhere:Military, Organizations, Universities, Banks, Private Sectors,ISPs, Airport, Transport... andWe Need to Learn Who, How , What.

ResearchesSearch about different solutions for the Problems andImplement different Security Technologies Exist Today toAchieve the best solution For DEFEND Against the Attackers.

SolutionThe Best Solution For Afghanistan

Challenges

Complex and Difficult Configurations!!! NO PAIN NO GAIN !!!

Challenges

Complex and Difficult Configurations!!! NO PAIN NO GAIN !!!

Future Work

Research on High Interaction Honeypot SystemsResearch on Honeynet Systems

Future Work

Research on High Interaction Honeypot SystemsResearch on Honeynet Systems

References

Michael D. Bauer. (2005). Linux Server Security. January.Andy Oram, John Viega. (2009). Beautiful LeadingSecurity Experts Explain How They Think. AprilNitesh Dhanjani, Billy Rios and Brett Hardin. (2009).Hacking The Next Generation. September.Lance Spitzner. (2002). Honeypots: TrackingHackers.September.etc...

Thank You For YourAttention

Designing Countermeasures For Tomorrows Threats

Technology

Transcript of Designing Countermeasures For Tomorrows Threats