1 / 13

LITNET CERT 2008

LITNET CERT 2008. Marius Urkis. Incidentai, 98-08. Incidentai, 2007-2008. Incidentų tipai. Informacija apie pažeidžiamumus. http://cert.litnet.lt. Pažeidžiamumai: SSL ir DNS !!!. Debian: OpenSSL/OpenSSH BIND: DNS atmintinės užteršimas. Nauji projektai. Mokyklų WWW srautų tyrimas

leyna
Download Presentation

LITNET CERT 2008

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. LITNET CERT2008 Marius Urkis

  2. Incidentai, 98-08

  3. Incidentai, 2007-2008

  4. Incidentų tipai

  5. Informacija apie pažeidžiamumus • http://cert.litnet.lt

  6. Pažeidžiamumai: SSL ir DNS!!! • Debian: OpenSSL/OpenSSH • BIND: DNS atmintinėsužteršimas

  7. Nauji projektai • Mokyklų WWW srautų tyrimas • Virusų gaudymo sistema • SCS

  8. Mokyklų srauto filtravimas • Social Networking (Neutral) 817,911   38%     • Web Email (Acceptable) 332,384   15%     • Search Engines (Acceptable) 196,051   9%     • Hardware and Software (Acceptable) 116,649   5%     • Marketing (Neutral) 88,557   4%     • Games (Neutral) 60,518   2%     • IP Address (Neutral) 48,997   2%     • News and Media (Acceptable) 42,442   2%     • Personals and Dating (Neutral) 40,389   1%     • Entertainment (Neutral) 23,890   1%     • Education (Acceptable) 22,013   1%     • Download Sites (Neutral) 17,088   <1%     • Pornography (Unacceptable) 12,594   <1%     • Sports (Acceptable) 12,097   <1%     • Non-Profit Organizations (Neutral) 11,917   <1%    

  9. Blokavimo eiga Aug 20 09:50:49 TCP 172.16.140.65:4085 -> 10.254.1.21:135 Aug 20 09:50:51 TCP 172.16.140.65:4152 -> 10.254.1.21:135 Aug 20 09:50:57 TCP 172.16.140.65:4178 -> 10.254.1.21:135 Aug 20 09:51:03 TCP 172.16.140.65:4318 -> 10.254.1.21:135 Aug 20 09:51:09 TCP 172.16.140.65:4505 -> 10.254.1.21:135 Aug 20 09:51:15 TCP 172.16.140.65:4599 -> 10.254.1.21:135 Aug 20 09:51:38 TCP 172.16.140.65:1233 -> 10.254.1.21:135 Aug 20 09:51:38 TCP 172.16.140.65:1234 -> 10.254.1.21:135 Aug 20 09:51:38 TCP 172.16.140.65:1235 -> 10.254.1.21:135 Aug 20 09:51:38 TCP 172.16.140.65:1236 -> 10.254.1.21:135 2008-08-20 09:51:41 172.16.140.65 tftp://172.16.140.65/antiv.exe 2008-08-20 09:51:15 172.16.140.65 tftp://172.16.140.65/antiv.exe [2008-08-20 09:56:09] 172.16.140.65 10.254.1.21 226 400 HTTP/0.9 NICK "baublys.litnet.ltijgclndb" "-" "-" [2008-08-20 09:56:47] 172.16.140.65 10.254.1.21 1320 403 HTTP/1.0 GET "85.114.141.207/DONT-TOUCH/wr.exe" "-" "Download" 172.16.140.65 Aug 20 09:55:39 TCP 172.16.140.65:4263 -> 10.254.1.21:80 10.254.1.21 http://www.ktu.lt MARK 0 -- * * 172.16.140.65 0.0.0.0/0 MARK set 0x29a

  10. LITNET SCS paslauga • Nemokami pilnai galiojantys serverių sertifikatai • Kaip pasinaudoti: • Organizacijos registravimas (vienkartinė procedūra) • Sertifikatų gavimas • Šiuo metu užregistruotos LITNET organizacijos • VGTU • KU • VDU (scs-ra pašto adresas) • VU (patikslinti detales) • Visa informacija http://scs.litnet.lt

  11. Pirmas sertifikatas !!! pastas.vgtu.lt • Iš viso išduota: 6

  12. Kita veikla • LITNET CERT susirinkimai: 2007-12 ir 2008-04 • CERT NIC.LV seminaras 2008-02, Ryga • CLOSER projekto konferencija 2008-07, Tbilisis • IS CERT

  13. Baigiau… • Klausimai?

More Related