Book Image

Practical Network Scanning

By : Ajay Singh Chauhan
Book Image

Practical Network Scanning

By: Ajay Singh Chauhan

Overview of this book

Network scanning is the process of assessing a network to identify an active host network; same methods can be used by an attacker or network administrator for security assessment. This procedure plays a vital role in risk assessment programs or while preparing a security plan for your organization. Practical Network Scanning starts with the concept of network scanning and how organizations can benefit from it. Then, going forward, we delve into the different scanning steps, such as service detection, firewall detection, TCP/IP port detection, and OS detection. We also implement these concepts using a few of the most prominent tools on the market, such as Nessus and Nmap. In the concluding chapters, we prepare a complete vulnerability assessment plan for your organization. By the end of this book, you will have hands-on experience in performing network scanning using different tools and in choosing the best tools for your system.
Table of Contents (19 chapters)
Title Page
Packt Upsell
Contributors
Preface
Index

Access control 


As an application or network owner, we should know who or what is accessing our network resources. If we do not know or do not keep track of our activity and instead just assume what is happening on the network, we cannot guarantee data security and the safety of end-users.

We need to start with the basics of security. This begins with understanding what's on our network.

Asset classification and physical security

The most basic (but often most overlooked) element of network security involves keeping hardware protected from theft or physical intrusion.

As mentioned earlier, the first thing we need to classify is our assets. Once data classification is identified, network servers, network switches and other core network components should be protected in well-guarded facilities. Cages and racks should be locked and permission should be granted based on requirements with proper approval and proper security guidelines.

Authentication, authorization, and accounting

Authentication, authorization...