Reference no: EM132865191

CO7607 Penetration Testing and Active Defence - University Of Chester

Learning Objective 1: Demonstrate the use of some complex penetration testing and active defence tools

Learning Objective 2: Discuss the need for and uses of active defence

Learning Objective 3: Critically evaluate and analyse active defence techniques

Assignment Brief

This assessment is to test your general knowledge of active defence and hands-on understanding of relevant offensive countermeasures tools.

1. Offensive Countermeasures (OCM) and Tools

OCM generally helps us to defend ourselves against attackers and in the process, enables us to get a better understanding of who is attacking us and why. The general categories of OCM are Annoyance, Attribution and Attack.

a. Briefly research and explain, in your own words, each of these three OCM categories (Annoyance, Attribution and Attack). Your discussion should include explanation of the category, its goal and how it can be accomplished. You may use examples.

Note: Avoid taking materials verbatim from source. Best practice is to read and understand the source and then write or paraphrase in your own words, adding value with respect to context and then referencing the source.

b. Demonstrate the use of the following three OCM tools:
» Browser Exploitation Framework (BeEF)
» Word Web Bug
» Kippo or Cowrie

For each tool, say which category it belongs to, what it is used for, explain how it can be used in a particular case example scenario and then demonstrate its use. For the demonstration, set up and use any two virtual machines (VMs) in which one plays the role of a target and the other plays the role of the attacker. Configure and execute the tool as required. Use relevant screenshots, from both VMs, to document and explain the exercise.

Your work MUST provide evidence that you have run the tools yourself, as opposed to having taken images from another source. You must change your terminal prompt to include your J number in the host name - for example, root@J12345 and all terminal screenshots must show the command used. You must include an ifconfig screenshot showing your IP address.

2. OCM General
a. As a defence measure, you want to set up a system that automatically blocks some inbound communications - that is, a system that will block incoming traffic to your system/network. The two ways of configuring your system are to automatically block communications based on traffic and/or based on IP address. Which option (block communications based on traffic or based on IP address) would you recommend and why? Give specific examples.

b. Research and discuss the current UK legislation or legal status relating to OCM. You are to consider any or all of the following:
» Find whether there is/are any existing specific legislation
» What you think is the general view on how the law on self-defence in cyberspace should be designed
» What the government is currently doing concerning legislation relating to OCM

You must use proper APA referencing.

Attachment:- Penetration Testing and Active Defence.rar