2KKUU7ita

Remember icon, 6
remote access services, 56
reporting results
about, 319
compiling, 319–320
creating reports, 322–324
prioritizing vulnerabilities, 320–322
Request for Comments (RFCs) list, 123
residential phones, 72
respecting privacy, 17
responding to vulnerabilities, 43–44
restricting anonymous connections to
system, 213
reverse ARPs (RARPs), 176
reverse social engineering, 75
.rhosts file, 238–241
RIPE Network Coordination Centre, 53, 358
Risk Taxonomy (Open Group), 321, 366
risks. See also vulnerabilities
database security, 310–311
minimizing storage system security, 315
minimizing web security, 300–304
security, 14–16
rogue wireless devices, 172–177
rules of ethical hacking, 17–18
• S •
salt, 101
SANS GIAC (website), 356
SANS Institute, 118, 159, 369
Sarbanes-Oxley Act (website), 359
scanners, 126–127
scanning
internal hosts, 54–55
ports, 128–133
SNMP (Simple Network Management
Protocol), 133–135
systems, 54–56
for unauthorized APs, 162–163
scrape, 73
screen captures, 48
script kiddies, 26, 28, 32
SeattleWireless Hardware Comparison
page (website), 372
Index
Secure Shell (SSH), 156, 170
Secure Sockets Layer/Transport Layer
Security (SSL/TLS), 170
SecureIIS (website), 302, 368
securing
operating systems, 118–119
.rhosts and hosts.equiv files, 238–241
Securities and Exchange Commission
(SEC), 52, 71, 358
security. See also physical security
checklists, 12
education and learning resources, 366
evaluations, 348
methods and models, 366
monitoring outsourcing, 333–334
by obscurity, 96, 300–301
Windows 8, 216
Security Accounts Manager (SAM)
database, 102
security assessment tools, 44–45
Security Awareness, Inc. (website),
336, 368
security events, logging, 333
security infrastructure, assessing, 329–330
Security On Wheels (blog), 366
security policy, 12–13
security processes, managing
automating ethical-hacking, 331–332
maintaining security efforts, 337
monitoring malicious use, 332–334
outsourcing ethical hacking, 334–335
security-aware mindset, 336
security researchers, 28
Security Tools Distribution (website), 360
security-aware mindset, 336
Secur/Tree (Amenza Technologies
Limited), 39, 366
segmenting networks, 156
semidirectional wireless antenna, 160
Server Message Block (SMB), 206
ServerDefender (website), 368
ServerMask (Port 80 Software), 301, 370
service set identifier (SSID), 162
Session Initiation Protocol (SIP), 271
SetGID, 242, 243
SetUID, 242, 243
385