Book Image

Practical Network Scanning

By : Ajay Singh Chauhan
Book Image

Practical Network Scanning

By: Ajay Singh Chauhan

Overview of this book

Network scanning is the process of assessing a network to identify an active host network; same methods can be used by an attacker or network administrator for security assessment. This procedure plays a vital role in risk assessment programs or while preparing a security plan for your organization. Practical Network Scanning starts with the concept of network scanning and how organizations can benefit from it. Then, going forward, we delve into the different scanning steps, such as service detection, firewall detection, TCP/IP port detection, and OS detection. We also implement these concepts using a few of the most prominent tools on the market, such as Nessus and Nmap. In the concluding chapters, we prepare a complete vulnerability assessment plan for your organization. By the end of this book, you will have hands-on experience in performing network scanning using different tools and in choosing the best tools for your system.
Table of Contents (19 chapters)
Title Page
Packt Upsell
Contributors
Preface
Index

Chapter 9. Public Key Infrastructure-SSL

In the previous chapter, we learned about network mapping tools and port scanning techniques used to detect the remote OS.

In today's digital era, more and more internet users are growing web businesses. Small to large businesses are coming up with higher numbers of marketing tools such as ads, web services, emails, social media, digital content, online banking, online cell phone apps and, of course, online shopping. However, no one wants to store or send information on the internet until information security is guaranteed. 

Secure Socket Layer (SSL) provides transport layer security for web-based applications and also provides end users or customers with a secure browsing experience. In this chapter we are going to discuss what SSL is, how it works and who needs it. We will also discuss the evolution of SSL, focusing on what you need to know in order to implement it. This will include looking at current threats and verification methods.

We will be covering...