An toàn thông tin s
Trung Tâm Tin Học - ĐHKHTN Trang 1





             

            
ngày càng  



ication và Auditing


     
             
thông tin, toà
I. 
  




 MAC (Mandatory Access Control)
 DAC (Discretionary Access Control)
 RBAC (Role-based access control)
MAC (Mandatory Access Control)
  


Username/Password
             
 
   




 
An toàn thông tin s
Trung Tâm Tin Học - ĐHKHTN Trang 3

 
 
 
 
 

 


Kerberos


3.
     




            

              







An toàn thông tin s
Trung Tâm Tin Học - ĐHKHTN Trang 6 Mutual authentication
 



Biosmetrics



 
 Chi phí cao

 
 
tra
An toàn thông tin s

An toàn thông tin s
Trung Tâm Tin Học - ĐHKHTN Trang 9   

 
 
 
 
III. 
             
dùng


Auditing system


Logging:            

System scanning:          


 
            
ngoài
An toàn thông tin s
Trung Tâm Tin Học - ĐHKHTN Trang 10

 

 
 
        

 


 
   

II. 




spoofing
Dos





             


    
IOS, fork() bomb).
   

   



          

          

         

 
          


zombie.



 

An toàn thông tin s
Trung Tâm Tin Học - ĐHKHTN Trang 14           


Flood Network (TFN hay TFN2k), Shaft

DDoS.
Buffer Overflows


   


An toàn thông tin s
Trung Tâm Tin Học - ĐHKHTN Trang 16

-n -p tcp.

          
connection. 


            
        



 


 
            
          
công.
Spoofing


           



      
 
 
 ICMP Redirect
An toàn thông tin s
Trung Tâm Tin Học - ĐHKHTN Trang 18

 
Relay Attacks






           
  
           


Dumpster diving
Dumpster div           


Social Engineering
nmap [Scan Type(s)] [Options] <host or net #1 [#N]>


 -sS : TCP SYN
 -sT : TCP connect()
 -sU : UDP scans
 -sO :IP protocol
 -sF -sX -sN : stealth FIN, Xmas tree, Null scan
 -sP : ping scanning
 -sV : version detection

Các o
 -    

 -    -    
request)
 -PU [portlist] dùng UDP
 -p port/range of ports

An toàn thông tin s
Trung Tâm Tin Học - ĐHKHTN Trang 20

 
-i
nmap 172.29.8.1, nmap 172.29.8.1 -255, nmap 172.29.8.1/24
nmap www.microsoft.com/24

           
ICMP (ICM sweep) và TCP port 80 ACK sweep.  -sP
-PO, dùng ICMP ping sweep

Nghe lén(Sniffing)


An toàn thông tin s
Trung Tâm Tin Học - ĐHKHTN Trang 22


            




 

   
            
              




 
   
 An toàn thông tin s
Trung Tâm Tin Học - ĐHKHTN Trang 23

 

Tcpdump [-adeflnNOpqRStuvxX] [-c count] [-C file_size] [-F file]
[-i interface] [-m module] [-r file] [-s snaplen] [-T type] [-U user] [-w
file] [ -E algo:secret ] [ expression ]

-
-

-
bytes.

Password Attacks
           
word

-force attack và dictionary-based
attack.
 Brute Force Attacks
 
 

 Dictionary-Based Attacks
 

            

  
Malicious code attack
 Virus