Network Protocols for Security Professionals

Get to grips with network-based attacks and learn to defend your organization's network and network devices

Key Features

• Exploit vulnerabilities and use custom modules and scripts to crack authentication protocols
• Safeguard against web, mail, database, DNS, voice, video, and collaboration server attacks
• Monitor and protect against brute-force attacks by implementing defense mechanisms

Book Description

With the increased demand for computer systems and the ever-evolving internet, network security now plays an even bigger role in securing IT infrastructures against attacks. Equipped with the knowledge of how to find vulnerabilities and infiltrate organizations through their networks, you'll be able to think like a hacker and safeguard your organization's network and networking devices. Network Protocols for Security Professionals will show you how.

This comprehensive guide gradually increases in complexity, taking you from the basics to advanced concepts. Starting with the structure of data network protocols, devices, and breaches, you'll become familiar with attacking tools and scripts that take advantage of these breaches. Once you've covered the basics, you'll learn about attacks that target networks and network devices. Your learning journey will get more exciting as you perform eavesdropping, learn data analysis, and use behavior analysis for network forensics. As you progress, you'll develop a thorough understanding of network protocols and how to use methods and tools you learned in the previous parts to attack and protect these protocols.

By the end of this network security book, you'll be well versed in network protocol security and security countermeasures to protect network protocols.

What you will learn

• Understand security breaches, weaknesses, and protection techniques
• Attack and defend wired as well as wireless networks
• Discover how to attack and defend LAN-, IP-, and TCP/UDP-based vulnerabilities
• Focus on encryption, authorization, and authentication principles
• Gain insights into implementing security protocols the right way
• Use tools and scripts to perform attacks on network devices
• Wield Python, PyShark, and other scripting tools for packet analysis
• Identify attacks on web servers to secure web and email services

Who this book is for

This book is for red team and blue team pentesters, security professionals, or bug hunters. Anyone involved in network protocol management and security will also benefit from this book. Basic experience in network security will be an added advantage.

Table of Contents

1. Data Centers and the Enterprise Network Architecture and its Components
2. Network Protocol Structures and Operations
3. Security Protocols and Their Implementation
4. Using Network Security Tools, Scripts, and Code
5. Finding Protocol Vulnerabilities
6. Finding Network-Based Attacks
7. Detecting Device-Based Attacks
8. Network Traffic Analysis and Eavesdropping
9. Using Behavior Analysis and Anomaly Detection
10. Discovering LAN, IP, and TCP/UDP-Based Attacks
11. Implementing Wireless Network Security
12. Attacking Routing Protocols
13. DNS Security
14. Securing Web and Email Services
15. Enterprise Applications Security – Databases and Filesystems
16. IP Telephony and Collaboration Services Security

Yoram Orzach is a senior networks and networks security advisor, providing network design and network security consulting services to a range of clients. Having spent thirty years in network and information security, Yoram has worked as a network and security engineer across many verticals in roles ranging from a network engineer, security consultant, and instructor. Yoram has gained his B.Sc. from the Technion in Haifa, Israel. Yoram's experience is both with corporate networks; service providers and Internet service providers' networks. His customers are Motorola solutions, Elbit Systems, 888, Taboola, Bezeq, PHI Networks, Cellcom, Strauss group, and many other hi-tech companies.

Deepanshu Khanna is a 29-year-old information security and cybercrime consultant and a pioneer in his country. The young and dynamic personality of Deepanshu has not only assisted him in handling information security and cybercrimes but also in creating awareness about these things. He’s a hacker appreciated by the Indian government, including the Ministry of Home Affairs and Defence, police departments, and many other institutes, universities, globally renowned IT firms, magazines, and newspapers. He started his career by presenting a popular hack of GRUB at HATCon. He also conducted popular research in the fields of IDS and AIDE and demonstrated MD5 collisions and Buffer overflows, among other things. His work has been published in various magazines such as pentestmag, Hakin9, e-forensics, SD Journal, and hacker5. He has been invited as a guest speaker to public conferences such as DEF CON, ToorCon, OWASP, HATCon, H1hackz, and many other universities and institutes.