[Year 12 SofDev] U4O2 KK - Techniques for testing network security

[Andrew Shortell]

User access to other areas
Users being able to change their permissions (e.g. Student has full
permissions to their home directory and then removes administrator and
system from their directory and thus no supervision and no control and can
add any one else!!)
Running exe files from sticks
Denial of service
Auto scans on file open
³sniffing² for hidden shares ­ esp ones set up by students
Wireless access to strays? (e.g. Google street view cars) - incidentally I
have not heard anything about ³war chalking² for a few years
Access to resources ­ e.g. Do your students have access to the printer in
the staff room?

Andrew

-- 
Andrew Shortell

Heidelberg Teaching Unit
Ph 9470 3403
Fax  9470 3215

c/o Reservoir High School
855 Plenty Rd
Reservoir 3073


On 23/08/11 10:56 AM, "Mark KELLY" <kel at mckinnonsc.vic.edu.au> wrote:

> Hi all. I'm working on a theory slideshow and can't think of much to
> say about testing techniques apart from:
> 
> € Simulate known threats and measure system response in terms of
> speed, accuracy and effectiveness of its reaction
> € Hire an expert outsider (e.g. a ³grey hat²) to test the security and
> report its weaknesses
> 
> What else can one do?  Any ideas?
> 
> --
> Mark Kelly
> Manager of ICT, Reporting, IT Learning Area
> McKinnon Secondary College
> McKinnon Rd McKinnon 3204, Victoria, Australia
> Direct line / Voicemail: +613 8520 9085, Fax +613 9578 9253
> kel at mckinnonsc.vic.edu.au
> VCE IT Lecture Notes: http://vceit.com
> Moderator: IT Applications Edulist
> 
> Want a good time? Call 0112358. Ask for Mr Fibonacci.
> 
> _______________________________________________
> http://www.edulists.com.au - FAQ, Subscribe, Unsubscribe
> IT Software Development Mailing List kindly supported by
> http://www.vcaa.vic.edu.au - Victorian Curriculum and Assessment Authority and
> http://www.vcaa.vic.edu.au/vce/studies/infotech/softwaredevel3-4.html
> http://www.vitta.org.au  - VITTA Victorian Information Technology Teachers
> Association Inc


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.edulists.com.au/pipermail/sofdev/attachments/20110823/60a2cc9e/attachment.html