DEFENSE SWITCHED NETWORK INFORMATION ASSURANCE ...

• If the system supports lines, the following manual calls should be attempted:
Analog to Analog, IP to IP, Analog to IP, and IP to Analog. Confirm that all test calls
are completed and all IP handsets are identified.
• Trunks allow a group of inlet switches or circuits to connect at the same time.
The service provider can provide a lesser number of circuits than might otherwise be
required, allowing many users to “share” a smaller number of connections and
achieve capacity savings. If the system supports trunks, the following manual calls
should be attempted: Analog over trunk and IP over trunk. Confirm that all test calls
were completed.
3. Discover Host
Finding all the hosts in use by the system is the first step in the technical
evaluation. Detecting all the possible hosts and their corresponding IP address
information is required to begin any further technical evaluation.
4. Conduct Ping Sweep
A general ping sweep will determine what hosts are available via the Internet
Control Message Protocol (ICMP). This is generally an ICMP echo request (type 8) to
elicit an ICMP echo reply (type 0) from a host.
5. Conduct Transmission Control Protocol (TCP) Sweep
The TCP sweep provides insight into available hosts when ICMP is disabled. A
TCP sweep will attempt to make TCP connections to a host range on a specified port
list. The client will send a Synchronize (SYN) and, if the host is available on that port,
the client will receive a SYN/Acknowledge (ACK) and respond with an ACK packet to
the target host with a sequence number incremented by one.
6. Perform Traffic Analysis
Traffic Analysis allows the test team to determine all the hosts that are included
within the solution under test.
7. Perform Port Enumeration
Port enumeration provides a list of services or applications that could be running
on the host and gives the tester a good indication of what operating system might be
present on the end-point. Port scanning of each host will provide a detailed list of which
ports are open, closed, or filtered on a specified host. Conduct port scans using many
different protocols, packet flags, and techniques. These different scans can yield
different results in different situations, depending on the configurations and protections
of each host. Additional Open Source Security Testing Methodology Manual strategies
are in Appendix E.
11