ine 200 301

ine 200 301.Security Evasion TechniquesThe final chapter of this book will provide an overview of methods often used by malicious people, as well as contracted penetration testers, to compromise networks. Attackers are always looking to abuse some vulnerability for some nefarious purpose, however, the success or failure of an attack is determined by another element. This element is "silence," meaning that the attacker must consider how far the attack will expose him or her and how to respond if the target's defenses detect the attack.This chapter describes how attackers can "keep it quiet" and the various tricks attackers use to avoid attack detection and forensics. Take for example the two methods used by criminals to burglarize a home, "kicking in the door" and "picking the lock", both of which achieve the same goal of looting. The difference is that kicking in the door not only makes a lot of noise, but also makes a mess on the floor, which will soon attract attention. Lock picking, though slower, leaves no trace and makes very little noise. That is why it is said that criminals who burglarize homes almost always choose lock picking. Another example is that criminals will pick the lock and activate the alarm system every few days before entering a home and looting the property. The purpose of acting this way is to make the security guard watching the surveillance think that the next alarm is just another false alarm. This way, the criminal doesn't have to worry about his actions attracting the attention of the security guards by calling the police. People's indifference to alarms can be a frequent occurrence in certain neighborhoods, where the alarms of cars parked in these neighborhoods constantly send out alarms on their own.14.1 Mapping Quizzes Mapping quizzes allow the reader to ascertain their familiarity with the content of the chapter. The quiz in this chapter includes io exercises to help the reader determine how to allocate his or her limited study time. The answers to these exercises can be found in the Appendix. Table 14.1 lists the basic topics in this chapter, along with their corresponding test questions.Table 14-1 Basic Topics and Test Questions Comparison TableEncryption and Tunneling 1, 2Resource Depletion 3Traffic Slicing 4, 5Protocol-Level Error Interpretation 6Traffic Timing, Substitution, and Insertion 7, 8