Loading....

Friday, July 24, 2009

Operating-system attacks

 
Hacking operating systems (OSs) is a preferred method of the bad guys. OSs
comprise a large portion of hacker attacks simply because every computer
has one and so many well-known exploits can be used against them.
Occasionally, some operating systems that are more secure out of the box —
such as Novell NetWare and the flavors of BSD UNIX — are attacked, and
vulnerabilities turn up. But hackers prefer attacking operating systems like
Windows and Linux because they are widely used and better known for their
vulnerabilities.

Here are some examples of attacks on operating systems:

  • Exploiting specific protocol implementations
  • Attacking built-in authentication systems
  • Breaking file-system security
  • Cracking passwords and encryption mechanisms

Understanding the Need to Hack Your Own Systems

To catch a thief, think like a thief.

That’s the basis for ethical hacking.

The law of averages works against security. With the increased numbers and

expanding knowledge of hackers combined with the growing number of system

vulnerabilities and other unknowns, the time will come when all computer

systems are hacked or compromised in some way. Protecting your systems

from the bad guys — and not just the generic vulnerabilities that everyone

knows about — is absolutely critical. When you know hacker tricks, you can

see how vulnerable your systems are.

Your overall goals as an ethical hacker should be as follows:

  • Hack your systems in a nondestructive fashion.
  • Enumerate vulnerabilities and, if necessary, prove to upper management that vulnerabilities exist.
  • Apply results to remove vulnerabilities and better secure your systems.

Introduction to Ethical Hacking

     
    The term “hacker” has a dual usage in the computer industry today. Originally, the term was defined as:
    • A person who enjoys learning the details of computer systems and how to stretch their capabilities—as opposed to most users of computers, who prefer to learn only the minimum amount necessary.
    • One who programs enjoys programming rather than just theorizing about programming.
            “hacking,” which was used to describe the rapid crafting of a new program or the making of changes to existing, usually complicated software.

            What is ethical hacking?

            Identifying risks and vulnerabilities is crucial to preventing exposure of
            Sensitive data, as well as for protecting the corporate reputation.
            Defining hacker
            Hacker is a word that has two meanings:
          • (white-hat) hackers

          • (black-hat) hackers.

              (white-hat) hackers
              Hacker is someone who likes to tinker with software or
              Electronic systems. Hackers enjoy exploring and learning how computer
              Systems operate. They love discovering new ways to work electronically.
              (black-hat) hackers.
              Someone who maliciously
              breaks into systems for personal gain. Technically, these criminals are
              Crackers (criminal hackers). Crackers break into (crack) systems with
              Malicious intent. They are out for personal gain: fame, profit, and even
              Revenge. They modify, delete, and steal critical information, often making
              Other people miserable.