Book Image

Building a Pentesting Lab for Wireless Networks

By : Andrey Popov, Vyacheslav Fadyushin, Aaron Woody
Book Image

Building a Pentesting Lab for Wireless Networks

By: Andrey Popov, Vyacheslav Fadyushin, Aaron Woody

Overview of this book

Starting with the basics of wireless networking and its associated risks, we will guide you through the stages of creating a penetration testing lab with wireless access and preparing your wireless penetration testing machine. This book will guide you through configuring hardware and virtual network devices, filling the lab network with applications and security solutions, and making it look and work like a real enterprise network. The resulting lab protected with WPA-Enterprise will let you practice most of the attack techniques used in penetration testing projects. Along with a review of penetration testing frameworks, this book is also a detailed manual on preparing a platform for wireless penetration testing. By the end of this book, you will be at the point when you can practice, and research without worrying about your lab environment for every task.
Table of Contents (15 chapters)
Building a Pentesting Lab for Wireless Networks
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
Index

SIEM


SIEM (Security information and event management) is the union of two terms denoting the application areas Security Information Management (SIM) and Security Event Management (SEM). The SIEM technology provides real-time analysis of events (alarms), security emanating from network devices, and applications.

In our environment, SIEM solutions allows us to track security events and to better correlate the actions of the simulated attacker and security specialist.

The field of knowledge about SIEM is very broad and requires several books. In this book, we will only touch on this subject and show how to install the popular free solution OSSIM.

OSSIM (Open Source Security Information Management) is a management, control, and information security system. Out of the box, OSSIM includes the following functionality:

  • The collection, analysis, and correlation of events—SIEM

  • The host intrusion detection system (HIDS)—OSSEC

  • Network intrusion detection system (NIDS)—Suricata

  • Wireless Intrusion Detection...