The Ethical Hacker Network - Network Scanning

Latest Additions

Who's Online

EH-Net News Feeds

Latest Additions

GeekSquadSF

Newbie

Offline

Posts: 1

Network Scanning

« on: May 09, 2008, 05:21:49 PM »

OK... wannabe/noob computer geek in the army looking at getting a little more savvy on network security. We have derka internet (only because the us is a little slow with getting us decent internet while we are here in Iraq). I have herd the rumor that some of the derka have been getting into our computers, and intercepting info that we are sending home... since I haven't been taught entirely too much about network security... or atleast in this sence... what can I do to check on these guys to make sure they're not skimming info off of my guys? is there stuff I can tell them to do besides keeping their software updated? Last, what would you guys recommend as far as training... since im here, I cant get to any classes... any ideas?

SPC Seth Alton
GeekSquadSF

"Whoever said that the pen is mightier than the sword,
obviously never encountered automatic weapons." -General Douglas McArthur


	Logged

g00d_4sh

Sr. Member

Offline

Posts: 394

Re: Network Scanning

« Reply #1 on: May 09, 2008, 06:09:08 PM »

Had to look up what the hell Derka ment. I'm assuming you're saying that the Army has it's network connected up to the Local ISPs for internet? And that you're concerned about both network penetration by outside (in the area) computers/users, and of surveliance of said traffic comming from your network through the local ISP? I'm assuming, though that may be a screw up on my part, that your Army network managment is keeping a fairly tight control on stuff. You arn't VPNing into networks back in the states? I'd assume you'd be doing that. I know when I'm not specifically at one of the local offices, I vpn into the DOI network before I do anything. (Theoretially). Using VPNs is a good way to avoid basic snooping. Also for private mail addresses, using something like Hushmail isn't a bad call. If you're thinking someone has gotten access to your computers... if it was physical access you have a bigger problem, and I'm ashamed at your security hehe. If it's remote, and you have any evidence... root kit, etc.. I'd reformat the machine, and start anew.


	Logged

"Bad.. Good? I'm the guy with the gun"

LSOChris

Guest

Re: Network Scanning

« Reply #2 on: May 09, 2008, 06:19:48 PM »

the army shouldnt be connected to to derka-net, but the troopies may have bought internet access from a local ISP. if you are connecting army systems to a local ISP you need to tell a network manager or Information assurance person ASAP. if you need help locating one PM me.

from a host perspective, ensure you are all patched up, using your windows firewall and run av (free from ako) and run your spyware checkers. download fport from foundstone and see what services are listening on those open ports, google to make sure of the binary. if you are really paranoid download rootkit revealer or something similar.

if you are on a local ISP...from a network perspective, go ahead and assume that all your traffic is being sniffed and monitored by the local isp and remember that when you are chatting on IM or whatnot. all the normal OPSEC stuff you are constantly hit with should apply.

if you guys bought internet for your own purposes and are actually worried about it i would suggest buying from a US SATCOM provider that would be a bit more trustworthy.