Cu 9: Phn tch l hng Firewall lc gi dn n mng b tn cng Man in the midle, cho v d v xut gii php khc phc

c l hng ny? 1.Mt vi yu im ca Firewall lc gi: -Khng kim sot c d liu t lp 4 tr nn -Khng h tr tnh nng xc thc ngi dng -Khng che giu kin trc bn trong ca mng cn bo v -Khng ngn chn tn cng gi mo a ch -Mc an ninh thp 2.Vi cch lc gi da theo a ch :l vic k tn cng s dng a ch IP gi mo vt qua module lc gi v truy cp cc my trong mng ni b cn bo v. C hai kiu tn cng da trn vic gi mo a ch IP l source address v man in the middle. Cch gii quyt vn ny l s dng phng php xc thc ngi dng i vi cc gi tin. Cu 10: Tn cng pass the hash l g? Hy phn tch Hash mc d liu v cho bit gii php phng chng loi tn cng ny? 1.L mt k thut hacking cho php k tn cng xc thc n mt my ch t xa hoc dch v bng cch s dng c bn NTLM ca mt khu ngi dng. K thut ny c th c thc hin i vi bt k my ch hoc dch v chp nhn xc thc LM hay NTLM, cho d n ang chy trn my tnh Windows, Unix, hoc bt k h iu hnh khc. 2.Phn tch Hash mc d liu: Mi khi bn to mt mt khu cho mt ti khon trong Windows, n s chuyn i mt khu thnh mt chui gia tr hash. Gi tr hash l kt qu ca mt hm mt m thc hin trn mt chui d liu c di ty , sau thc hin mt hm m ha ton hc trn chui d liu ny, kt qu l mt chui c di c nh. Mi khi truy cp vo ti nguyn no trn mt my tnh c bo v bi c ch xc thc Username v password bn s phi thc hin mt yu cu xc thc khi to bi my ch. Thng thng, bn cn cung cp Username v password. Khi bn nhp Password my tnh ca bn s thc hin hm hash ln password v gi trnh kt qu cho my ch, my ch s tin hnh so snh vi gi tr hash c sn trong c s d liu xc thc. Nu cc gi tr hash khp nhau bn c truy nhp. 3.K thut tn cng Pass the hash kh pht hin v ngn chn do cch thc n khai thc v quy trnh xc thc c mt s cch phng chng nh sau: -S dng h thng pht hin xm nhp -Cc ly cc h thng nhy cm -S dng gii php xc thc thay th -Hn ch truy nhp vi quyn qun tr Cu 11: V v phn tch s bo mt hnh trang 96 chng 3?

Source IP

Destination IP

Service

Any VPN Server VPN Service VPN Internal Any Server network Any VPN Server Any Any Web Server HTTP Any Mail Server SMTP Mail Any SMTP Server Internal Any HTTP,HTTPS,FTP, network TELNET,SSH Internal Any DNS DNS Any Any Any T s ta thy h thng bn trong c bo v bi h thng Firewall -Server VPN c t c lp vi h thng DMZ v internal network -Vic tch ring Server VPN c lp vi cc h thng khc c th gip cho h thng an ton hn v vic truy cp vo Server VPN c an ton v nhanh hn nh s h tr v kim sot ca firewall. - D vo bng lut ta thy -Lut 1,2,3 lin quan n Server VPN cho php cc VPN client truy cp vo h thng Server VPN v c php s dng cc ng dng ca Server VPN -VPN server c th gi cc kt ni n mng internal network -Cm khng cho ngi ngoi truy cp vo VPN Server -Cn li th c th truy cp vo vng DMZ (Web, Mail, FTP) -Cho php vng internal network truy cp ra internet -Khng cho internet truy cp vo vng internal network Cu 12: V v phn tch kin trc bo mt cho cc mng E-commerce (TMT) (Hnh 9.3/Page 567)?

-Cc my ch thng mi in t phi c mt ID v Password bt u kt ni SQL vi my ch c s d liu -Nhn vin ca t chc c quyn truy cp vo mng cc b v do c th trc tip tn cng -Cc my ch c s d liu c th c chuyn n mt mng ring bit v c bo v bi mt bc tng la ni b -Firewall cho php t ngoi truy cp vo h thng web server vi port 80 v 443 (HTTP, HTTPs) t Internet -Firewall gii hn truy cp t mng bn ngoi n Web server v Application server -Web server s dng kt ni gi thng tin n Server Application v nhn thng tin t khch hng. -Server Application thc hin truy vn SQL n Server Database. -Chia cc chc nng ca my ch thng mi in t gia my ch web v my ch ng dng. Cc my ch Web trnh by cc thng tin cho khch hng v chp nhn thng tin t khch hng. Cc my ch ng dng x l thng tin t khch hng, thc hin truy vn n my ch c s d liu, v cung cp thng tin n my ch Web trnh by cho khch hang -M hnh nay gip tng tnh nng an ton cho h thng cc my ch Database v my ch Application. Cu 13: Nu cc bc trong qu trnh thit k h kin trc Ecommere 1. u tin xc nh cc yu cu bo mt cho h thng trong tng dch v an ninh: tnh bo mt, tnh ton vn, tnh sn sng v tnh xc thc 2. Xc nh mt thit k h thng cp cao p ng cc yu cu bo mt. Gi s rng h thng s tng tc vi mainframe c c thng tin ti khon ca khch hng v thc hin chuyn giao v kim tra n hng 3. Xc nh c th cc yu cu bo mt cho mi thnh phn h thng: h thng my khch, my ch web, ng dng, v c s d liu 4. Xc nh tng th kin trc ca h thng, bao gm nhng thnh phn cn thit bo v h thng. ng cho rng thnh phn an ninh mng tn ti trong mng thay vo xc nh tt c cc thnh phn cn thit 5. Thm vo thit k ny cc h thng b sung cn thit p ng yu cu sn sng.