2.1.5 Attack and Defense Strategy

Attack Strategies

General Attack Strategies
- General attack strategies incorporate various techniques used by attackers to breach security protocols.
- Key methods include:
- Perform reconnaissance:
  - Reconnaissance is the process of gathering vital information about an organization.
  - Components of reconnaissance include:
  - System hardware information
  - Network configuration
  - Individual user information
- Use social engineering:
  - Social engineering is the manipulation of individuals to obtain sensitive information.
  - Common tactics employed in social engineering include:
  - Intimidation
  - Sympathy
- Use technical approaches:
  - Technical approaches rely on software or utilities to identify vulnerabilities within a system.
  - A specific tool mentioned is Security Pro 8.0.
Understanding Attack Methodologies
- Insights into common attack methodologies equip defenders to better secure their assets.
- This lesson covers essential aspects of attack and defense strategies.

Port Scan Strategy:
- Ping Sweep:
- A method used to check the availability of hosts within a network.
Breach the System:
- A breach refers to the penetration of system defenses, often achieved via reconnaissance information.
Escalate Privileges:
- The primary goal of attackers is to escalate their privileges once the system has been breached.
- Higher privileges allow access to more confidential information and greater control over the system.
Create a Backdoor:
- A backdoor is an alternative access point within an application or operating system used for maintenance or troubleshooting.
- Hackers create backdoors to exploit systems without detection.
Stage Computers:
- Staging involves preparing a computer to perform further attack tasks, which may include installing offensive software.
- This is considered an optional step in an attack.
Exploit Vulnerabilities:
- Exploitation refers to the utilization of known vulnerabilities in software and systems.
- After exploitation, an attacker can conduct various actions such as:
- Stealing sensitive information
- Denying system services
- Crashing systems
- Modifying or altering critical information

General Defense Methodologies:
- Effective defense strategies involve a set of methodologies aimed at protecting assets from attacks.
Layering:
- Layering is the implementation of multiple security strategies to safeguard the same asset.
- Known as defense in depth, this approach avoids reliance on a single layer of security.
- The principle is that the most secure system has numerous layers of security, eliminating single points of failure.
Principle of Least Privilege:
- This principle asserts that users or groups should only have the access necessary for their roles, avoiding excess privileges.
- It is easier to provide additional access when needed than to revoke prior permissions.
Variety:
- Defense strategies should encompass a variety of methods.
- Simply replicating the same defense layer does not ensure effective protection against attacks.
Randomness:
- Emphasizes constant changes in personal habits and passwords to mitigate predictable behaviors that attackers can exploit.
Simplicity:
- Security measures should ensure protection while remaining straightforward to understand and implement.

Awareness of attack strategies and defense methodologies is crucial for creating robust security solutions.
Methodical approaches can help organizations safeguard against both common and sophisticated attacks, ensuring sensitive information remains protected.