Semester FIT3105 1 2008 Security and Identity Management Lab exercises:
System identity management and security are very important for any security person. You are advised to discuss the questions very carefully with your tutor and do the exercises with understanding. The lab exercises will provide you important knowledge and experience to understand security, authentication and identity management. Part I: Linux installation (time: first two weeks) You will install the Linux OS and needed software for your lab exercises and some parts of your assignment. The installation note will be handed to you at the lab. Part II: You need to understand the computer system and network communication before you do authentication and system component identification. The following work will help you understand computer system, network communication, basic authentication and system component identification. (time: three to four weeks) 1. Find which shell are you using and its process ID. Then change to another shell and do ps to see which shell you are in now. 2. Can you terminate your shell by killing it using the kill command and its process id? 3. Find the first process in the system by looking at its process ID (Hint: ps ef | more and check the process ids). 4. Look at all the different dates that processes were started and find out which ones were started first, which ones were started some time ago and which ones were started recently. 5. Firstly, run the following program in the back ground: ps ef | more & , then find the process id of the new process. 6. Discuss how communication protocols like TCP, UDP, ICMP are identified in Unix environments. 7. Discuss how services such as ftp, sshd, dns are identified in Unix environments. 8. Discuss with students important host and network configuration files such as /etc/hosts, /etc/resolv.conf, /etc/xinetd.conf, etc. what can we tell from those files in terms of system ids? 9. Find the IP address of your machine. (Hint: ifconifg). Is it your machine id? 10. Check if your machine can talk to sng.its.monash.edu.au (Hint: ping sng). What is the id of sng machine? 11. Can we use the ping command to find the id of a networked computer? 12. Find the default gateway and its IP address of your local network (Hint: netstat r). does the gateway ip identify any thing in the network? 13. Exercise dig command and find out what information you can get by using dig.
14. Try to find all the services that your system may provide and their associated port number (Hint: see /etc/services). Are port numbers the ids of the services? 15. Discuss how well-known ports are used for providing network services (eg. How ssh service is provided, how mail service is provided) and work out the ids of those services. 16. What are the DNS main servers that your machine uses (Hint: see /etc/resolv.conf; and ping these servers). What will happen to your machine if those servers are down? Are the ids of those servers different from the ids of the client machines? 17. Try nmap command if it is available on your machine and discuss with our tutor what you can do with programs liike nmap in looking for the ids of some components (users, machines, software programs). 18. Discuss how setuid and setgid work and ids. 19. Try vmstat and discuss when this command should be used. 20. Try top command and discuss when this command should be used. 21. List the tasks of managing a Unix computer system. 22. List at least five rules that need to follow to secure a Unix system (Hint: account control, file sharing control (authentication, authorisation), system monitoring, id management.) 23. Think of how to secure programs which come with the OS. 24. Think of how to secure some of the important files in the file system. 25. List useful commands that you may need to use to manage and secure your Unix system. 26. Find a way to check someone connected to your network from other networks. 27. Try to find if there is an encryption program on your system and use it with the assistance from the tutor. 28. Explore the Internet with whois command. a. pick a domaim and whois that domain b. try to find the IP of the machine youve just found c. try further to find more details related to that machine. 29. Identify some gateways of Monash computer network (ask the tutor for the command). 30. Can you tell if someone is on Monash network or another network if the person tells you her/his IP address? 31. Find ...