6th European Conference - Academic Conferences

Muhammad Naveed
3389 Tcp Open Microsoft-rdp
5060 Tcp Filtered Sip
8081 Tcp Open http
Port Protocol State Service
8402 Tcp Open http
8443 Tcp Open http
9999 Tcp Open http
53 Udp Open Domain
123 Udp Open | filtered
161 Udp Open | filtered
445 Udp Open | filtered
500 Udp Open | filtered
1028 Udp Open | filtered
1434 Udp Open | filtered
3456 Udp Open | filtered
4500 Udp Open | filtered
5060 Udp Open | filtered
Table 29: Aggressive OS scan results (most probable)
OS Name and Version Type Vendor OS Family OS Generation Accuracy of result
Microsoft Windows General Microsoft Windows 2003 97%
Server 2003 SP2 Purpose
Table 30: Aggressive OS scan results (other)
Type Vendor OS Family OS Generation Accuracy of result
General Purpose Microsoft Windows XP 91%
General Purpose Microsoft Windows 2000 88%
General Purpose Microsoft Windows PocketPC/CE 88%
7. Conclusion and suggestions
By looking at the statistics presented, it can be easily seen that the most prominent organizations of
Pakistan don’t have their webservers secure. The results show the large number of ports that can be
used to attack the webservers. Each of such ports is a potential venue of attack for the ill-intentioned
people. The results can be compared with the benchmarks which have the best security. On the basis
of these results it can be inferred that, if these wealthy and large organization don’t bother to invest
the time and money in network security, the conditions for small organization will be worst. This study
is intended to give just an overview of importance given to security in our region and is by no means a
detailed security analysis of these webservers. Webservers are used just as an index to study the
security practices because they are most easily accessible and most important resource of an
organization.
All of the organization having webservers or networks connected to the Internet should use the
scanners like Nmap (which we have used in this study) to find the security loopholes in their networks
and then try to rectify them. Every organization should have proper network security policy and it
should be ensured that the network security policy is implemented well. Every effort should be done
to make the network as secure as possible. Even the most secure networks are not secure today, so
the insecure networks can presents a lot of difficulties and problems, which might not be apparent
today but insecure networks have to pay the price in future.
Pakistan is already suffering from terrorism. Thousands of people have lost their lives and billions of
dollars have been spent on the war against terrorism. Cyber terrorism is one of the next avenue that
terrorist can use to give a new direction to their terrorist activities. One can imagine the severe
consequences if terrorists are able to exploit webserver of popular news channel. They can transmit a
message about a plane crash, presence of bomb in a very busy place, announcement about attack
on the country’s active enemy and lot of others that may have very adverse effects. Pakistan being a
nuclear power cannot afford this in any case because that might lead to a nuclear war.
References
Ahmad A. Abu-Musa (2006), " Evaluating the Security Controls of CAIS in Developing Countries: The Case of
Saudi Arabia," The International Journal of Digital Accounting Research, 2006, vol. 6 no. 11, pp. 25 – 64
198