Book Image

Practical Network Scanning

By : Ajay Singh Chauhan
Book Image

Practical Network Scanning

By: Ajay Singh Chauhan

Overview of this book

Network scanning is the process of assessing a network to identify an active host network; same methods can be used by an attacker or network administrator for security assessment. This procedure plays a vital role in risk assessment programs or while preparing a security plan for your organization. Practical Network Scanning starts with the concept of network scanning and how organizations can benefit from it. Then, going forward, we delve into the different scanning steps, such as service detection, firewall detection, TCP/IP port detection, and OS detection. We also implement these concepts using a few of the most prominent tools on the market, such as Nessus and Nmap. In the concluding chapters, we prepare a complete vulnerability assessment plan for your organization. By the end of this book, you will have hands-on experience in performing network scanning using different tools and in choosing the best tools for your system.
Table of Contents (19 chapters)
Title Page
Packt Upsell
Contributors
Preface
Index

Chapter 3. Server-Level Security

In the previous chapter, we discussed how to build a secure network infrastructure. In this chapter, we will discuss how to build and ensure security for servers inside a secure network.

Server/computer security is a critical part of the infrastructure for running business smoothly. Information security has evolved over the years due to an increasing dependency on public networks not to disclose personal, financial, and other restricted information. Consequently, it becomes important to maintain data confidentiality, integrity and availability. This chapter focuses on securing data and implementing various policies to secure a server infrastructure.

We will cover the following topics in this chapter:

  • Classification of data
  • Physical security
  • Disk encryption
  • Hardening server security
  • Authentication NTLM versus Kerberos
  • Password policies
  • Server-level permissions
  • Server antivirus and malware protection
  • Local security policies