CHAPTER 5 CYBERSECURITY

Network Scanning

The process of gathering information about computing systems on a network.

Nmap

(network mapper) The most widely used network scanner.

Discovery scan

A type of scan that finds live IP addresses on a network.

Ping sweep

A network scanning technique that uses ICMP ECHO REQUEST packets to search for live hosts.

Port Scanning

The process of determining which TCP and UDP ports a target is listening on.

Full Scan

A type of scan that elicits the maximum amount of information from and about a target.

Packet Crafting

The practice of altering a normal IP packet before transmitting it on a network to test firewall rules, evade intrusion detection, or cause a denial of service.

Network Mapping

The process of discovering devices on a network in an effort to visualize the network and create a logical topology map.

Metasploit

A multi-purpose computer security and penetration testing framework.

Enumeration

The process of querying a device or service for information about its configuration and resources.

Banner Grabbing

An enumeration tactic that involves trying to open a session with a service and getting the service to identify itself.

Network Shares

Directories that users can access by using a network sharing protocol.

Null Sessions

A connection type that allowed any client to make an unauthenticated connection to the IPC$ (inter-process communication) share on the host.

Vulnerability

A weakness that might or might not be exploitable.

Vulnerability scan

A reconnaissance tactic that sends specially crafted packets or commands to a service to see how it responds.

Compliance Scan

A type of vulnerability scan that verifies a network adheres to certain policy requirements, as mandated by law, industry, or individual company.

Server

A computer dedicated to serving clients on the network, or a specialized application installed on that computer.

Web app

A script and executable that are included in a website's HTML and provide dynamic content to the user, usually running on the website's standard TCP 80 and 443 ports.

Packet Inspection

The process of examining a network packet to see if it meets certain rules.

Container

A lightweight virtual machine that runs a single application and the processes that the app requires.

Container image

A standalone executable package that possesses everything it needs to run: code, runtime, system libraries and tools, and settings.