Top 10 2014-I3 Insecure Network Services - Revision history

Yunsoul at 05:56, 5 February 2016

2016-02-05T05:56:38Z

2015-12-01T23:01:18Z

2015-08-18T00:11:15Z

2015-02-09T22:07:24Z

2015-02-09T21:50:13Z

2015-02-09T21:32:00Z

2014-06-29T20:20:50Z

2014-06-29T20:20:19Z

2014-06-29T20:18:49Z

2014-06-29T20:17:14Z

@@ Line 33: / Line 33: @@
 # Ensuring services are not vulnerable to DoS attacks which can affect the device itself or other devices and/or users on the local network or other networks.
 # Ensuring network ports or services are not exposed to the internet via UPnP for example
 Please review the following tabs for more detail based on whether you are a [https://www.owasp.org/index.php/OWASP_Internet_of_Things_Top_Ten_Project#tab=Manufacturers Manufacturer], [https://www.owasp.org/index.php/OWASP_Internet_of_Things_Top_Ten_Project#tab=Developers Developer] or [https://www.owasp.org/index.php/OWASP_Internet_of_Things_Top_Ten_Project#tab=Consumers Consumer]

← Older revision		Revision as of 23:01, 1 December 2015
Line 1:		Line 1:
−	<center>[https://www.owasp.org/index.php/OWASP_Internet_of_Things_Project#tab=~~Top_IoT_Vulnerabilities~~ Back To The Internet of Things Top 10]</center>	+	<center>[https://www.owasp.org/index.php/OWASP_Internet_of_Things_Project#tab=Top_10_IoT_Vulnerabilities__282014_29 Back To The Internet of Things Top 10]</center>

	{{Top_10_2010:SummaryTableHeaderBeginTemplate\|year=2013\|language=en}}		{{Top_10_2010:SummaryTableHeaderBeginTemplate\|year=2013\|language=en}}

← Older revision		Revision as of 00:11, 18 August 2015
Line 1:		Line 1:
−	<center>[https://www.owasp.org/index.php/~~OWASP_Internet_of_Things_Top_Ten_Project~~#tab=~~OWASP_Internet_of_Things_Top_10_for_2014~~ Back To The Internet of Things Top 10]</center>	+	<center>[https://www.owasp.org/index.php/OWASP_Internet_of_Things_Project#tab=Top_IoT_Vulnerabilities Back To The Internet of Things Top 10]</center>

	{{Top_10_2010:SummaryTableHeaderBeginTemplate\|year=2013\|language=en}}		{{Top_10_2010:SummaryTableHeaderBeginTemplate\|year=2013\|language=en}}

@@ Line 34: / Line 34: @@
 # Ensuring network ports or services are not exposed to the internet via UPnP for example
 {{Top_10_2010:SubsectionAdvancedTemplate|type={{Top_10_2010:StyleTemplate}}|subsection=example|position=left|risk=1|year=2013|language=en}}
 '''Scenario #1:''' Fuzzing attack causes network service and device to crash.

@@ Line 25: / Line 25: @@
 * Determining if insecure network services exist by reviewing your device for open ports using a port scanner
 * As open ports are identified, each can be tested using any number of automated tools that look for DoS vulnerabilities, vulnerabilities related to UDP services and vulnerabilities related to buffer overflow and fuzzing attacks
-* Reviewing ports to ensure they are absolutely necessary and if there are any ports being exposed to the internet using UPnP.
+* Reviewing network ports to ensure they are absolutely necessary and if there are any ports being exposed to the internet using UPnP.
 {{Top_10_2010:SubsectionAdvancedTemplate|type={{Top_10_2010:StyleTemplate}}|subsection=freetext|title=How Do I Secure My Network Services?|position=right|year=2013|language=en}}

@@ Line 22: / Line 22: @@
 {{Top_10:SubsectionTableBeginTemplate|type=main}} {{Top_10_2010:SubsectionAdvancedTemplate|type={{Top_10_2010:StyleTemplate}}|subsection=freetext|title=Are My Network Services Secure?|position=firstLeft|year=2013|language=en}}
-The simplest way to determine if insecure network services exist is to review your device for open ports using a port scanner. As open ports are identified, each can be tested using any number of automated tools that look for DoS vulnerabilities, vulnerabilities related to UDP services and vulnerabilities related to buffer overflow and fuzzing attacks. Discovered ports should also be reviewed to ensure they are absolutely necessary and if there are any ports being exposed to the internet using UPnP.
+Checking for Insecure Network Services includes:
 {{Top_10_2010:SubsectionAdvancedTemplate|type={{Top_10_2010:StyleTemplate}}|subsection=freetext|title=How Do I Secure My Network Services?|position=right|year=2013|language=en}}
@@ Line 29: / Line 32: @@
 # Ensuring services are not vulnerable to buffer overflow and fuzzing attacks.
 # Ensuring services are not vulnerable to DoS attacks which can affect the device itself or other devices and/or users on the local network or other networks.
 {{Top_10_2010:SubsectionAdvancedTemplate|type={{Top_10_2010:StyleTemplate}}|subsection=example|position=left|risk=1|year=2013|language=en}}

@@ Line 37: / Line 37: @@
 </span>{{Top_10_2010:ExampleEndTemplate}}
-'''Scenario #2:''' Ports open to the internet possibly without the users knowledge via UPnP.
+'''Scenario #2:''' Ports open to the internet possibly without the user's knowledge via UPnP.
 {{Top_10_2010:ExampleBeginTemplate|year=2013}}<span style="color:red;">
 Port 80 and 443 exposed to the internet via a home router.