2005.01_Cisco IOS from an Attacker's Point of View_[Cisco].pdf
(
320 KB
)
Pobierz
444026749 UNPDF
&LVFR,26IURPDQ
$WWDFNHUV3RLQWRI9LHZ
.DPLO)ROJD
7KHUHDUHPDQ\ZD\VDQ
DWWDFNHUFDQWDNHFRQWURORYHU
&LVFRQHWZRUNGHYLFHVRIWHQ
GXHWRDQDGPLQLVWUDWRUVODFN
RINQRZOHGJHRUQHJOLJHQFH
$VHFXULW\YXOQHUDELOLW\
H[SORLWDWLRQWKDWOHDGVWRDQ
XQDXWKRUL]HGDFFHVVRUD'HQLDO
RI6HUYLFHDWWDFNDUHMXVWD
PDWWHURIWLPH
PHQWVRIWKHPDMRULW\RIFRPSXWHUQHW
ZRUNV7KH\SOD\DQLPSRUWDQWUROHLQ
QHWZRUNLQIUDVWUXFWXUHDQGDUHRIWHQWKUHDWHQHG
E\DGLUHFWDWWDFN&LVFRGHYLFHVDUHFRPPRQO\
XVHG E\ ,QWHUQHW 6HUYLFH 3URYLGHUV ,63VRU
WHOHFRPPXQLFDWLRQRSHUDWRUVLQWKHLUEDFNERQH
QHWZRUNV$OWKRXJKWKH\DUHSHUFHLYHGDVUHOL
DEOHDQGVHFXUHDWWDFNVRQ&LVFRURXWHUVDQG
VZLWFKHV WDNH SODFH TXLWH IUHTXHQWO\ 5HFHQW
VRXUFH FRGH WKHIWVDQGHUURUVIRXQG LQ WKHLU
RSHUDWLQJV\VWHP&LVFR,26KDYHJHQHUDWHG
HYHQPRUHFDXVHIRUFRQFHUQ
5HOHDVH1XPEHUVFRQVLVWRIWZRSDUWVD
QXPHULFYHUVLRQLHIROORZHGE\DQ
DOSKDWKDWGHVFULEHVDVSHFL¿F,26YHUVLRQ
7±EXJ¿[HVDQGQHZIXQFWLRQDOLW\
6±EXJ¿[HVDQGKLJKSHUIRUPDQFHURXWLQJ
VXSSRUW
(±EDFNERQHQHWZRUNGHYLFHVDGYDQFHG
4XDOLW\RI6HUYLFH
IXQFWLRQVYRLFHVHUYLFHV
VXSSRUWVHFXULW\
%±EXJ¿[HVEURDGEDQGVHUYLFHVVXSSRUW
2QHPD\DOVRFRPHDFURVVVSHFLDOHGLWLRQYHU
VLRQV
7DUJHWRIDWWDFN
,26 2SHUDWLQJ 6\VWHP
,QWHUQHWZRUNLQJ2S
HUDWLQJ6\VWHP
LV DW WKH KHDUW RI DOO &LVFR
SURGXFWV ,WV PDLQ WDVN LV SDFNHW URXWLQJLQ
ZLGHDUHDQHWZRUNV7KH,26V\VWHPXVHVD
GH¿QHGVHWRIFRPPDQGVWRPDQDJHURXWHUV
KDUGZDUHFRPSRQHQWV$VZLWKHYHU\RSHUDW
LQJV\VWHP,26LVVKLSSHGZLWKWRROVIRUGHYLFH
FRQ¿JXUDWLRQ PRQLWRULQJ DQG PDLQWHQDQFH
ZKLFKDUHVWRUHGLQ
ÀDVK
PHPRU\LQWKHIRUPRI
DVLQJOH¿OHWKDWFRQWDLQVDOODYDLODEOHIXQFWLRQV
7KUHHPDLQV\VWHPFDWHJRULHVDUHSUHVHQWHGLQ
7DEOH
:KDW\RXZLOOOHDUQ
ZKDW VHFXULW\ YXOQHUDELOLWLHV DQ DWWDFNHU FDQ
H[SORLWWRWDNHFRQWURORYHUD&LVFRURXWHU
KRZDQDWWDFNHUFDQODXQFKD'R6DWWDFNRQD
&LVFRURXWHU
ZKDWFDQ\RXGRWRSURWHFW\RXUURXWHU
:KDW\RXVKRXOGNQRZ
&LVFRURXWHUEDVLFV
6103SURWRFROEDVLFV
XXXIBLJOPSH
)BLJO
&
LVFR 6\VWHPVSURGXFWVDUHYLWDOHOH
-S]MY39=
$±DFFHVVURXWHUVGLDOXSFRQ
QHFWLRQV
'±['6/
+±6'+621(7
-±$LURQHW ZLUHOHVV WHFKQROR
JLHV
0±
0RELOH:LUHOHVV
:±$70/$1OD\HUVZLWFK
LQJ
7DEOH
&LVFR,26FDWHJRULHV
&LVFR,26
FDWHJRU\
$SSOLFDWLRQ
*HQHUDO
'HSOR\PHQW
*'
*HQHUDODSSOLFDWLRQYHUVLRQ±VWDEOHDQGEXJIUHH
(DUO\'HSOR\PHQW
('
&RQWDLQVVXSSRUWIRUQHZWHFKQRORJLHV±EXJVDQG
YXOQHUDELOLWLHVPD\RFFXU
0DLQWHQDQFH
5HOHDVH
05
$UHSODFHPHQWIRU
*HQHUDO'HSOR\PHQW
YHUVLRQ
±FRQWDLQVEXJ¿[HVWKRURXJKO\WHVWHG
:KHQGLVFXVVLQJURXWHUVRUVZLWFK
HVLWLVLPSRUWDQWWRLQFOXGHFRQ¿JX
UDWLRQ¿OHV(YHU\&LVFRURXWHUZRUNV
ZLWKWZRFRQ¿JXUDWLRQ¿OHV
UXQQLQJ
FRQ¿J
DQG
VWDUWXSFRQ¿J
7KH¿ UVW
FRQWDLQV WKH FXUUHQW FRQ¿JXUDWLRQ
VWDWHWKHODWWHUFRQWDLQVWKHFRQ¿JX
UDWLRQXVHGGXULQJGHYLFHVWDUWXS,W
VKRXOGEHQRWHGWKDWFKDQJHVPDGH
WR
UXQQLQJFRQ¿J
ZKLOVWWKHGHYLFHLV
RQOLQHZLOOEHORVWDIWHUGHYLFHUHVWDUW
XQOHVVVDYHG
/LVWLQJ
%DVLFURXWHULGHQWL¿FDWLRQZLWKPWUSURJUDP
PWUKRVWSURYLGHUQHW
0DWWCVWUDFHURXWH>Y@
)UL2FW
.H\V'±'LVSOD\PRGH5±5HVWDUWVWDWLVWLFV4±4XLW
3DFNHW3LQJV
+RVWQDPH/RVV5FY6QW/DVW%HVW$YJ:RUVW
KRVWH[DPSOHQHW
URXWHUH[DPSOHQHW
DEFRSHUDWRUQHW
FLVFRSURYLGHUQHW
KRVWSURYLGHUQHW
6\VWHPLGHQWL¿FDWLRQ
7RSHUIRUPDVXFFHVVIXODWWDFNDQLQ
WUXGHUKDVWRJDLQDVPXFKLQIRUPDWLRQ
DERXWWKHWDUJHWDVSRVVLEOH6\VWHP
LGHQWL¿FDWLRQLVDEDVLFDQGHDV\WDVN
,WFRQVLVWVRIWKUHHSKDVHV
/LVWLQJ
5HPRWH26LGHQWL¿FDWLRQZLWKWKHXVHRI1PDS
QPDSYY2V6FLVFRSURYLGHUQHW
6WDUWLQJQPDSKWWSZZZLQVHFXUHRUJQPDSDW&(67
,QWHUHVWLQJSRUWVRQ
7KHSRUWVVFDQQHGEXWQRWVKRZEHORZHDUHLQVWDWHFORVHG
325767$7(6(59,&(9(56,21
WFSRSHQWHOQHWG&LVFRWHOQHWG,26;
WFSRSHQ¿QJHU&LVFR¿QJHUG,26;
WFSRSHQKWWS&LVFR,26DGPLQLVWUDWLYHZHEVHUZHU
'HYLFHW\SHURXWHU
5XQQLQJ&LVFR,26;
26GHWDLOV&LVFR,26:&±D
1PDSUXQFRPSOHWHG±,3DGGUHVVKRVWXSVFDQQHGLQVHFRQG
EXLOGLQJDOLVWRIKRVWVLQWKHWDU
JHWQHWZRUN
DFTXLULQJ LIUPWLQ W
VHUYLFHV SURYLGHG E\ WKH WDUJHW
PDFKLQH
LGHQWL¿FDWLRQ RI WKH WDUJHW PD
FKLQHVRSHUDWLQJV\VWHP¿QJHU
SULQWLQJ
W
JHWPDFKLQH6XFKQDPLQJFRQYHQ
WLRQVDUHVXUSULVLQJO\TXLWHSRSXODU
±HVSHFLDOO\LQVPDOOQHWZRUNV
&LVFRURXWHUVUHVSRQGLQDPDQ
QHUVLPLODUWRRWKHUQHWZRUNGHYLFHV
$QHDV\\HWKLJKO\HI¿FLHQWZD\WR
UHPRWHO\LGHQWLI\DQ,26YHUVLRQLVWR
XVHWKH
1PDS
SURJUDP
1PDS
LVD
SRUWVFDQQHUZLWK5HPRWH2SHUDWLQJ
6\VWHPLGHQWL¿FDWLRQ
¿QJHUSULQWLQJ
FDSDELOLWLHV,IWKLVWRROUHSRUWVDFWLYH
+773WHOQHWDQG¿QJHUVHUYLFHVRQ
DUHPRWHKRVW/LVWLQJWKHUHLVD
KLJKSUREDELOLW\WKDWWKHKRVWLVD&LV
FRGHYLFH7KHVFDQQHUZLOOSURYLGH
GHWDLOHG LQIRUPDWLRQ DERXW LQVWDOOHG
VRIWZDUH DQG KDUGZDUHDVZHOODV
WKH,26YHUVLRQ
&LVFRGHYLFHVFDQEHFRQ¿JXUHG
WKURXJK DQ HDV\WRXVH
FRPPDQG
OLQH LQWHUIDFH
&/, $ WHUPLQDO
FRQVROH RU YLUWXDO WHUPLQDOV EDVHG
RQ WHOQHW RU 66+ FRQQHFWLRQV FDQ
EHXVHGE\DQDGPLQLVWUDWRUWRDF
FHVV WKH URXWHUV FRQ¿JXUDWLRQ
/LVWLQJVKRZVDQH[DPSOHRIVXFK
WHOQHWFRQQHFWLRQ
8VHU $FFHVV 9HUL¿FDWLRQ
V D
UHJLVWHUHGEDQQHURI&LVFR6\VWHPV
±WKHDWWDFNHUFDQEHVXUHWKDWWKH
GHYLFHWKH\KDYHFRQQHFWHGWRZDV
PDQXIDFWXUHGE\&LVFR$OWKRXJKWKH
DGPLQLVWUDWRUFDQFKDQJHWKHEDQQHU
WH[WLWLVUDUHO\GRQH
:KHQ WKHWHOQHW VHUYLFHLVQRW
DFWLYH66+SURWRFROFDQEHXVHGWR
DFFHVV &LVFR GHYLFHV 7KH DWWDFNHU
FDQXVH
WHOQHW
FOLHQWRQSRUW±WKH
W
GHIDXOW66+SRUW±WRSUHFLVHO\LGHQWLI\
WDUJHW V\VWHPV 7KH UHVXOW VKRZQ LQ
/LVWLQJOHDYHVQRURRPIRUGRXEWWKDW
WKHWDUJHWGHYLFHKDVDQDFWLYH66+
VHUYLFHYHUVLRQ
&LVFR
7KH,26V\VWHPKDVRWKHUVSH
FL¿F IHDWXUHV WKDW FDQ EH XVHG IRU
LGHQWL¿FDWLRQ 7KH\DUHEDVHGRQ
SDFNHWPDQLSXODWLRQ)RUH[DPSOHD
)BLJO
XXXIBLJOPSH
&LVFRGHYLFHVDUHFRPPRQO\IRXQGDW
WKHSHULSKHU\RIDSURYLGHURSHUDWRU
QHWZRUN$QDWWDFNHUFDQXVHWKH
PWU
WRROWRSHUIRUPDVLPSOHWHVW,QWKH
H[DPSOHEHORZ/LVWLQJWKHLGHQWL
¿FDWLRQLVVWUDLJKWIRUZDUG7KHKRVW
QDPHG
FLVFRSURYLGHUQHW
LVRXUWDU
/LVWLQJ
7HOQHWVHVVLRQZLWKD
&LVFRURXWHU
UHPRWHFRQ¿JXUDWLRQ([WHQGHG$F
FHVV&RQWURO/LVWVDOORZHYHQPRUH
ÀH[LELOLW\$SURSHUO\FRQ¿JXUHG$&/
FDQVWRSDQ\LQWUXGHU±DQDWWDFNRU
V\VWHPLGHQWL¿FDWLRQDWWHPSWZLOOEH
UHQGHUHGLPSRVVLEOH
UHTXHVWZKLFKZDVVHQWXVLQJDZHE
EURZVHU
WHOQHW
7U\LQJ«
&RQQHFWHGWR
(VFDSHFKDUDFWHULVµA@¶
KWWSOHYHO
H[HFVKRZFRQ¿J
7KHHUURUPHVVDJHLVUHFHLYHG$Q
RWKHU DWWHPSW LV WKHQ PDGH ZLWKD
KLJKHUDXWKHQWLFDWLRQOHYHO
8VHU$FFHVV9HUL¿FDWLRQ
3DVVZRUG
3DVVZRUG
3DVVZRUG
%DGSDVVZRUGV
&RQQHFWLRQFORVHGE\IRUHLJQKRVW
7KH¿UVWVWHS
7KH PRVW FRPPRQO\H[SORLWHGYXO
QHUDELOLWLHVLQ,26WKHRQHVWKDWJLYH
WKHDWWDFNHUIXOODFFHVVWRGHYLFHV
FRQ¿JXUDWLRQ DUH +773 VHUYHU
LPSOHPHQWDWLRQ YXOQHUDELOLWLHV 7KH
+773VHUYHULVDXVHUIULHQGO\DOWHU
QDWLYHWRDVWDQGDUGFRPPDQGOLQH
LQWHUIDFH1RZOHWVWU\FRQQHFWLQJWR
D&LVFRURXWHUXVLQJDZHEEURZVHU
7KHUHVXOW VKRXOG EH VLPLODU WRWKH
RQHVKRZQLQ)LJXUH ZKHUH DX
WKRUL]DWLRQLVUHTXLUHG
7KHUH DUH VL[WHHQ SHUPLVVLRQ
OHYHOV IURP WR LQ&LVFR,26
ZLWK GLIIHUHQW FRPPDQGV DVVLJQHG
WR GLIIHUHQW OHYHOV
(QDEOH
GLVDEOH
H[LW
KHOS
DQG
ORJRXW
FRPPDQGVDUH
SHUPLWWHG LQ OHYHO
]HUR
/HYHORQH
XVHU
DOORZVWKHXVHRIFRPPDQGV
WKDWPDNHQRFKDQJHVWRDURXWHUV
FRQ¿JXUDWLRQ7KHKLJKHVWOHYHO
HQ
DEOH
SHUPLWVDOOFRPPDQGV
7KH LQWUXGHUFDQWU\DVLPSOH
EXWHIIHFWLYHWULFNWKH\FDQFDQFHO
WKHUHTXHVWWRHQWHUWKHSDVVZRUG
$IWHU FDQFHOOLQJ WKH\ ZLOO UHFHLYH
DQHUURUPHVVDJH,IWKH\QRZVHQG
D FDUHIXOO\FUDIWHGUHTXHVWWRWKH
+773VHUYHUWKH\ ZLOOUHFHLYH D
ZHESDJHFRQWDLQLQJ WKH URXWHUV
FRQ¿JXUDWLRQ
'HWDLOHGDQDO\VLVRIWKLVW\SHRI
VLWXDWLRQFDQEHVHHQLQWKHIROORZLQJ
KWWSOHYHO
H[HFVKRZFRQ¿J
/LVWLQJ
7HOQHWVHVVLRQRQ
SRUWZLWKD&LVFRURXWHU
7KHURXWHUVFRQ¿JXUDWLRQFDQEHVHHQ
LQWKHZHEEURZVHUZLQGRZ7KHDWWDFN
ZDVVXFFHVVIXOEHFDXVHHUURUVLQWKH
,26+773VHUYHULPSOHPHQWDWLRQDO
ORZH[HFXWLRQRIDQ\FRGHDIWHUORFDO
XVHU DXWKHQWLFDWLRQ 7KH VXFFHVVIXO
+773DXWKHQWLFDWLRQ OHYHOPD\YDU\
IURPWRGHSHQGLQJXSRQWKHGH
YLFHV,26YHUVLRQ,26YHUVLRQV
WRDUHYXOQHUDEOHWRWKLVNLQGRI
DWWDFN7KHUHLVQRGDQJHULIWKHDG
PLQLVWUDWRUXVHV7$&$&6RU5$',86
VHUYHUVIRUH[WHUQDODXWKHQWLFDWLRQ
7KHVFULSWIURP/LVWLQJFDQEH
XVHGWR¿QGWKHDSSURSULDWHDXWKHQ
WLFDWLRQOHYHO
,IWKHGHYLFHLVYXOQHUDEOHWKH
VFULSWZLOOUHWXUQWKHIROORZLQJLQIRU
PDWLRQ
WHOQHW
7U\LQJ«
&RQQHFWWR
(VFDSHFKDUDFWHULVµA@¶
66+&LVFR
UHSO\WRDQ,&03SDFNHWZLOOKDYHD
SULRULW\ÀDJVHWWR
[F
7KHOHQJWKRI
WKHUHSO\LVE\WHV
7KH DERYHLQIRUPDWLRQ FDQ EH
XVHG IRU UHPRWH GHYLFH LGHQWL¿FD
WLRQ WKH PDMRULW\ RI,26YHUVLRQV
ZLOOVHQGD567SDFNHWLQUHVSRQVH
WRD6<1SDFNHWVHQWWRSRUW
7KLVLVDUHVXOWRIDVSHFL¿F7&3,3
KHDSLPSOHPHQWDWLRQ :KDWV HYHQ
PRUHLQWHUHVWLQJ±DUHSO\SDFNHWZLOO
FRQWDLQWKHVWULQJ
FLVFR
$OOGRQH
H[SORLWDEOHOHYHOV
'HWHFWLRQDQG
H[SORLWDWLRQRI&LVFR
,26YXOQHUDELOLWLHV
7KHDWWDFNHUFDQVHQGWKHIROORZLQJ
UHTXHVWWRWKH+773VHUYHU
KWWSURXWHUVDGGUHVV!OHYHO
H[HFVKRZFRQ¿J
$IWHU DFTXLULQJ GHWDLOHG LQIRUPDWLRQ
DERXW D WDUJHWGHYLFHWKHDWWDFNHU
FDQ GHWHFW DQG H[SORLW &LVFR ,26
YXOQHUDELOLWLHV7KLVWDVNLVIDUPRUH
GLI¿FXOW WKDQ V\VWHP LGHQWL¿FDWLRQ
)LJXUH
%HDULQPLQGWKDWQRWDOOYXOQHU
DELOLWLHVFDQEHH[SORLWHG7KLVLVGXH
WRWKHIDFWWKDW,26DOORZVWKHFRQ
¿JXUDWLRQ RI SDFNHW ¿OWHUV WKURXJK
$FFHVV&RQWURO/LVWV
$&/V$&/V
#('%&&
&&'#)#"(%'#"
!'%"#"(%'#""&""''#')
"!#%)''
'%!# *')$ '
V
GH¿QHSURWRFROW\SHWKHVRXUFHSRUW
DQGDGGUHVV DQGWKH GHVWLQDWLRQ
SRUW DQG DGGUHVV $Q DGPLQLVWUDWRU
FDQGHFLGHZKDWWRGRZLWKDSDFNHW
7KH\FDQDOORZDFFHVVIURPVSHFL¿HG
KRVWVZLGHDUHDQHWZRUNVRUEORFN
#%)%&'%'
!'%#"(%'#"&!#
)LJXUH
&LVFRGHYLFHDWWDFNVFKHPD
XXXIBLJOPSH
)BLJO
-S]MY39=
:LWKDELWRIOXFNWKHDWWDFNHUFDQ
DFFHVVDZHESDJHFRQWDLQLQJWKH
FRQ¿JXUDWLRQ RI WKH XQDWWHQGHG
URXWHUWKDWLVQRWUXQQLQJWKHPRVW
XSWRGDWH YHUVLRQ RI ,26 )LJ
XUH
7)73
±DGPLQLVWUDWRUVPLVWDNHV
7)73 LV D VLPSOH ¿OH WUDQVIHU SUR
WRFRO ODFNLQJ DXWKHQWLFDWLRQ &LVFR
URXWHUV VWRUH WKHLU FRQ¿JXUDWLRQ
LQ 195$0 PHPRU\ RU RQ D 7)73
VHUYHU7KHDGPLQLVWUDWRUVKRXOGEH
DZDUH WKDW LW LV YHU\GDQJHURXV WR
OHDYHWKLVVHUYLFHHQDEOHGRUXQUH
VWULFWHGXQOHVV$FFHVV&RQWURO/LVWV
$&/VDUHXVHG
7KH QDPH RIWKHFRQ¿JXUDWLRQ
¿OH FRQVLVWV RI WKH KRVW QDPH IRO
ORZHG E\
FRQIJ
)LJXUH
+773DXWKRUL]DWLRQ
WIWS
WIWS!YHUERVH
WIWS!WUDFH
WIWS!JHWFLVFRFRQIJ
WIWS!TXLW
,WLVDFRPPRQPLVWDNHWROHDYHWKH
7)73VHUYHUDFFHVVLEOH7KHDERYH
PHWKRG ZRUNV IRU ¿OH XSORDGLQJ DV
ZHOODVIRU¿OHGRZQORDGLQJ
O
DQGPRQLWRULQJRI7&3,3FRPSXWHU
QHWZRUNV6103ZRUNVE\TXHU\LQJ
PDQDJHG QHWZRUN GHYLFHV KDYLQJ
6103DJHQWLQVWDOOHGDQGFROOHFWLQJ
LQIRUPDWLRQ IURP WKHP 7R DQVZHU
WKH TXHU\ DQ 6103 DJHQW UHIHUV
WRD
0DQDJHPHQW,QIRUPDWLRQ%DVH
0,% 0,%V DUH VWDQGDUGL]HG DQG
FRQWDLQLQIRUPDWLRQDERXWWKHGHYLFH
DORQJZLWKLWVFRQ¿JXUDWLRQ
$FFHVVWRD0,%EDVHLVSRVVLEOH
XSRQVXSSO\LQJDSDVVZRUGZKLFKLV
FDOOHGD
FRPPXQLW\VWULQJ
$
FRPPX
QLW\VWULQJ
FRQVLVWVRIWZRSDVVZRUGV
)LJXUH
:HESDJHZLWKWKHURXWHUVFRQ¿JXUDWLRQ
\
RQHIRUUHDGLQJDQGZULWLQJ
UHDG
ZULWH
±5:7RPDNHTXHU\LQJIRU
VSHFL¿F LQIRUPDWLRQ HDVLHU
2EMHFW
,'HQWL¿HUV
2,'V ZHUH LQWURGXFHG
7KH\ KDYH D IRUP RI GRWGHOLPLWHG
VWULQJVRIGLJLWV
,QWKHIROORZLQJH[DPSOHDQDW
WHPSWLVPDGHWRUHDGWKH0,%IURP
D&LVFRGHYLFHVHDUFKLQJIRUWKH
2,'ZKLFKFRQWDLQV
LQIRUPDWLRQ DERXW WKH ,26YHUVLRQ
7KH
VQPSJHW
FRPPDQG IURP WKH
ZKLFK DOORZV UHDGLQJ RI HYHU\2,'
IURPWKHGHYLFHV0,%7KH
VQPSJHW
FRPPDQGZLOOEHH[HFXWHGZLWKWKH
IROORZLQJ SDUDPHWHUV ,3 DGGUHVV
FRPPXQLW\ WLQJ
FLVFR
DQG2,'
W
XFGVQPS
SDFNDJH ZLOO EH XVHG
VQPSJHW?
FLVFR
V\VWHPV\V'HVFU &LVFR
,QWHUQHWZRUN2SHUDWLQJ
6\VWHP6RIWZDUH,26WP
6RIWZDUH&,60
9HUVLRQD
)BLJO
XXXIBLJOPSH
J
KRVWQDPHFRQIJ!
!
7KHGHIDXOWQDPHRIWKHFRQ¿JXUD
WLRQ¿OHIRUDURXWHUQDPHG
FLVFR
LV
FLVFRFRQIJ
6KRXOGWKHDWWDFNHU¿QG
SRUWRSHQDQGDFFHVVLEOH±DSRUW
VFDQQHUZRXOGGHWHFWWKLV±WKH\FDQ
PDNH DQ DWWHPSW WR GRZQORDG WKH
FRQ¿JXUDWLRQ¿OH
6103YXOQHUDELOLWLHV
6LPSOH1HWZRUN0DQDJHPHQW3URWR
FRO
6103LVXVHGIRUPDQDJHPHQW
RQHIRUUHDGLQJ
UHDGRQO\
±52DQG
/LVWLQJ
$VFULSWH[SORLWLQJ,26+773YXOQHUDELOLW\
WH[W )XUWKHUPRUH 6103 SURWRFRO
LVYHU\
QRLV\
±GHYLFHVDUHTXHULHG
ELQVK
,GLRVKWWSDXWKVKYURRW([SURRW
%UXWHIRUFH,26+773DXWKRUL]DWLRQYXOQHUDELOLW\&LVFR%XJ,'&6&GW
7$5*(7
)(7&+ XVUELQIHWFK
\
FDQ HDVLO\ JDLQ DFFHVV WR WKH DX
WKHQWLFDWLRQVWULQJ7KHVHFRQGDQG
WKHWKLUGSURWRFROYHUVLRQV6103
YDQG6103YXVHDQHQFU\SWHG
FRPPXQLW\
QDPHEXWWKH\ DUH QRW
FRPPRQO\XVHG
0DQ\DGPLQLVWUDWRUV GRQW SD\
HQRXJK DWWHQWLRQ WR SURSHU 6103
FRQ¿JXUDWLRQDQGGHIDXOWSDVVZRUGV
DUHRIWHQIRXQG52
SXEOLF
DQG5:
/(9(/ 6WDUW/HYHO
(;3/2,7$%/( &RXQWHU
ZKLOH>/(9(/OW@GR
&0' ^)(7&+`KWWS^7$5*(7`OHYHO^/(9(/`H[HFVKRZFRQ¿J
HFKRHFKR^&0'`
LI^&0'`WKHQ
(;3/2,7$%/( CH[SU^(;3/2,7$%/(`C
¿
F
SULYDWH
1HDUO\DOOGHYLFHVZLWK,26
YHUVLRQVROGHUWKHQVWLOOKDYHWKH
5:
FRPPXQLW\
QDPHVHWWRGHIDXOW
,/0,
,QWKHIROORZLQJH[DPSOHDQDW
WHPSWLVPDGHWRUHDGDQGZULWHWRD
&LVFRURXWHUVVWDUWXSFRQ¿JXUDWLRQ
¿OH7KHVWDUWXSFRQ¿JXUDWLRQ
VWDU
WXSFRQ¿J
LVDWH[W¿OHVWRUHGLQWKH
GHYLFHVPHPRU\DQGORDGHGGXULQJ
V\VWHPVWDUWXS
7KH
VQPSVHW
WRRO IURP WKH
QHW
VQPS
SDFNDJHFDQEHXVHGWRVHWD
UHTXLUHGYDOXHRIDQ2,'LQWKH0,%
EDVH$
FRPPXQLW\VWULQJ
IRUUHDGLQJ
DQGZULWLQJPXVWEHSURYLGHG,QWKH
IROORZLQJH[DPSOHWKH5:
FRPPXQLW\
VWULQJ
LV
/(9(/ CH[SU/(9(/C
GRQH
HFKRHFKR$OOGRQH
HFKR^(;3/2,7$%/(`H[SORLWDEOHOHYHOV
5(/($6(62)7:$5(IF
&RS\ULJKWF
E\FLVFR6\VWHPV,QF
&RPSLOHG0RQ1RY
E\NHOO\WKZ
J FLVFR
$GLFWLRQDU\ZLWK
WHQVRIWKRXVDQGVRIZRUGVJLYHVD
YHU\KLJKSUREDELOLW\RIFRPSURPLV
LQJD
FRPPXQLW\VWULQJ
'HWDLOHG LQIRUPDWLRQDERXWWKH,26
YHUVLRQLVUHWXUQHG,QDVLPLODUZD\
E\ PRGLI\LQJ WKH 2,' SDUDPHWHU
YDOXHWKHDWWDFNHUFDQUHDGDOOSD
UDPHWHUVIURPWKH0,%EDVHLQFOXG
LQJWKHFRQ¿JXUDWLRQ
,QIRUPDWLRQIURP6103
7KH¿UVWWKLQJDQDWWDFNHUVKRXOGGRDI
WHUFRPSURPLVLQJD
FRPPXQLW\VWULQJ
SDVVZRUGLVWRUHDGWKH
0DQDJHPHQW
,QIRUPDWLRQ%DVH
0,%0,%GH¿QHV
LQIRUPDWLRQVWRUHGLQDGHYLFHV6103
WUHH7KHDERYHPHQWLRQHGWDVNFDQ
EHDFFRPSOLVKHGZLWKWKHKHOSRIWKH
XFGVQPS
SDFNDJH VKLSSHGZLWK
HYHU\81,;7KH
VQPSZDON
FRPPDQG
J ,/0,
7KHIROORZLQJFRPPDQG
ZLOOFUHDWHDFRS\RIWKHFRQ¿JXUDWLRQ
¿OHRQDUHPRWH7)73VHUYHU
VQPSVHWF,/0,[[[[?
\\\\?
URXWHUFRQ¿J
:KHUHFDQRQHJHWWKH
FRPPXQLW\VWULQJ"
:KDWFDQWKHDWWDFNHUGRLIWKH\
GRQWNQRZ WKH
FRPPXQLW\VWULQJ
SDVVZRUG" :KHQ D SRUW VFDQQHU
UHSRUWV WKDW SRUW LVRSHQDQG
DFFHVVLEOHD
EUXWHIRUFH
PHWKRG
FDQEHXVHGWR¿QGWKHFRPPXQLW\
VWULQJ7KHDWWDFNFDQEHODXQFKHG
ZLWK WKH
$'0VQPS
SURJUDP 7KLV
VFDQQHUSHUIRUPV6103VHUYHUVH
FXULW\DXGLWLQJRQDWDUJHWPDFKLQH
7KH SURJUDP FDQ ODXQFK D
EUXWH
IRUFH
DWWDFNRQ WKH
FRPPXQLW\
VWULQJ
XVLQJDGLFWLRQDU\VXSSOLHGDV
DWH[W¿OH
$'0VQPS
UHSRUWVEDFN
RQ DOO PDWFKHG
FRPPXQLW\VWULQJV
WKDWFDQEHUHDGIURPDQGZULWWHQ
WRWKHGHYLFHV0,%
ZKHUH[[[[LVWKHDGGUHVVRIWKH
7)73VHUYHUWRZKLFKWKHFRQ¿JXUD
WLRQ¿OHZLOOEHVDYHGDQG\\\\LV
WKHDGGUHVVRIWKHURXWHU
7KHIROORZLQJLVWKHDFWXDOFRP
PDQGIRUDWDUJHWPDFKLQH
N
ZLOOEHXVHGLQWKHIROORZLQJH[DPSOH
WRVHTXHQWLDOO\UHDGWKH2,'VLQWKH
HQWLUH 0,% 7KH FRPPDQG UHTXLUHV
WZR SDUDPHWHUV WKH GHYLFHV ,3 DG
GUHVVDQGD
FRPPXQLW\VWULQJ
/LVWLQJVKRZVWKDWHYHQDVPDOO
SDUWRIWKH0,%EDVHFRQWDLQVYDOX
DEOH LQIRUPDWLRQ DERXW WKH GHYLFH
FRQ¿JXUDWLRQ
VQPSVHWF,/0,?
?
URXWHUFRQIJ
0RUHSRVVLELOLWLHV
6103 SURWRFRO FDQ EH H[WUHPHO\
GDQJHURXV ZKHQ LPSURSHUO\FRQ
¿JXUHG RU EDGO\ LPSOHPHQWHG 7KH
¿UVW 6103 YHUVLRQ 6103 Y
VHQGVWKH
FRPPXQLW\VWULQJ
LQFOHDU
,IWKHURXWHULVYXOQHUDEOHWKHFRQ¿J
XUDWLRQ¿OHZLOOEHVDYHGRQD7)73
VHUYHUZLWKDQDGGUHVV
:KHQ WKH DWWDFNHU SRVVHVVHV WKH
&LVFR FRQ¿JXUDWLRQ ¿OH WKH\ FDQ
PRGLI\ LW LQ DQ\ ZD\ WKH\ ZDQW WR
7KH\FDQWKHQVHQGWKHDOWHUHG¿ OH
XXXIBLJOPSH
)BLJO
\
YHU\RIWHQDQGHDFKTXHU\FRQWDLQV
WKH
FRPPXQLW\
QDPH(YHU\ VQLIIHU
/LVWLQJ VKRZVD
FRPPXQLW\
VWULQJ
QDPHG
Plik z chomika:
masterkom
Inne pliki z tego folderu:
2005.01_Cisco IOS from an Attacker's Point of View_[Cisco].pdf
(320 KB)
2010.01_Attacks and Mitigation with Cisco_[Cisco].pdf
(766 KB)
2010.01_Cisco Network Device Configuration Course_[Cisco].pdf
(464 KB)
2010.01_Cisco Router & Firewall Forensics_[Cisco].pdf
(333 KB)
2010.01_Cisco Routers with PPPOE Internet Connection_[Cisco].pdf
(175 KB)
Inne foldery tego chomika:
Blisko Lotnisko
CBT Nuggets
CCDA
CCNA
CCNA Całość
Zgłoś jeśli
naruszono regulamin