The Experts below are selected from a list of 360 Experts worldwide ranked by ideXlab platform

Emilio Angel Villanueva Munoz - One of the best experts on this subject based on the ideXlab platform.

Keski-korsu P. - One of the best experts on this subject based on the ideXlab platform.

  • Automated port scanning and security testing on a single network host
    University of Oulu, 2016
    Co-Authors: Keski-korsu P.
    Abstract:

    Abstract Black-box security testing is divided into five phases: reconnaissance, scanning, exploitation, post exploitation and reporting. There are many tools and methods to perform security testing in the exploitation and post-exploitation phases. Therefore, the first two steps are crucial to execute properly to narrow down different options to do security testing. In the scanning phase, the penetration tester’s goal is to gather as much information as possible from the system under test. One task is to discover open network ports and used network protocols. Nmap is a port scanning tool to check network port states and what network protocols target host supports. Nmap’s different port scanning techniques should be used to obtain comprehensive results of port states. The results from different scanning techniques have to be combined so that port state assignments have to be allocated to trusted and untrusted assignments. After port scanning has been executed, the actual software security testing can begin. This testing can be automated to begin right after port scanning. Automated tests are started of services that run behind open ports that have been discovered in port scanning. The Nmap scripting engine also has a module to execute general scripts to gather more information on the system under test. Another tool, Nikto, is implemented to test services that use Hypertext Transfer Protocol (HTTP). Port scanning and automated testing is time consuming, when scanning and testing is executed comprehensively. Sometimes it is crucial to obtain results in a short time, so there should be options on broadness of scanning and testing. Comprehensive scanning and testing may produce large amounts of scattered information so reporting of the results should be brief and clear to help penetration tester’s work. The performance of the scanning and testing implementation is evaluated by testing a single network host and flexibility is validated by running the scanning and testing on other network hosts.Yksittäisen verkkolaitteen automatisoitu porttiskannaus ja tietoturvatestaus Tiivistelmä Black-box-tietoturvatestaus on jaettu viiteen vaiheeseen: tiedustelu, skannaus, hyödyntäminen, hyödyntämisen jälkeiset toimet ja raportointi. On olemassa paljon työkaluja ja metodeja tietoturvatestauksen tekemiseen hyödyntämisvaiheessa ja hyödyntämisen jälkeisissä toimissa. Tämän vuoksi kaksi ensimmäistä vaihetta on tärkeä suorittaa huolellisesti, jotta eri tietoturvatestausvaihtoehtoja voidaan vähentää. Skannausvaiheessa tietoturvatestaajan päämäärä on kerätä mahdollisimman paljon tietoa testikohteesta. Yksi tehtävä tässä vaiheessa on löytää avoimia verkkoportteja ja käytettyjä IP-protokollia. Nmap on porttiskannaustyökalu, jonka avulla voidaan selvittää verkkoporttien tilat sekä käytetyt verkkoprotokollat. Nmap sisältää erilaisia porttiskannaustekniikoita, joita tulee käyttää kattavien skannaustulosten saamiseksi. Eri skannaustekniikoista pitää yhdistellä tuloksia, joten skannaustekniikoiden antamat luokitukset tulee jakaa luotettaviin ja ei-luotettaviin tuloksiin. Kun porttiskannaus on suoritettu, varsinainen tietoturvatestaus voi alkaa. Testauksen voi automatisoida alkamaan heti porttiskannauksen jälkeen. Automaatiotestit ajetaan palveluihin, jotka toimivat avoimien porttien takana. Avoimet portit on tutkittu porttiskannausvaiheessa. Nmapin skriptityökalu sisältää myös moduulin, joka suorittaa yleisiä testejä testikohteeseen, millä saadaan lisätietoa testattavasta kohteesta. Toinen testaustyökalu, Nikto, on implementoitu testaamaan palveluja, jotka käyttävät Hypertext Transfer Protokollaa (HTTP). Porttiskannaus ja automatisoitu tietoturvatestaus vie aikaa, kun skannaus ja testaus suoritetaan kokonaisvaltaisesti. Joskus on kuitenkin tärkeää saada tuloksia lyhyessä ajassa, joten testaajalla tulisi olla eri laajuisia skannaus- ja testausvaihtoehtoja. Kokonaisvaltainen skannaus ja testaus voi tuottaa suuren määrän hajallaan olevaa tietoa, joten tulokset pitää raportoida lyhyesti ja selkeästi, jotta penetraatiotestaajan työ helpottuu. Skannaus- ja testausohjelman toimintakyky arvioidaan skannaamalla yksittäinen verkkolaite ja joustavuus muihin ympäristöihin varmistetaan skannaamalla ja testaamalla useampi verkkolaite

  • Automated port scanning and security testing on a single network host
    University of Oulu, 2016
    Co-Authors: Keski-korsu P.
    Abstract:

    Black-box security testing is divided into five phases: reconnaissance, scanning, exploitation, post exploitation and reporting. There are many tools and methods to perform security testing in the exploitation and post-exploitation phases. Therefore, the first two steps are crucial to execute properly to narrow down different options to do security testing. In the scanning phase, the penetration tester’s goal is to gather as much information as possible from the system under test. One task is to discover open network ports and used network protocols. Nmap is a port scanning tool to check network port states and what network protocols target host supports. Nmap’s different port scanning techniques should be used to obtain comprehensive results of port states. The results from different scanning techniques have to be combined so that port state assignments have to be allocated to trusted and untrusted assignments. After port scanning has been executed, the actual software security testing can begin. This testing can be automated to begin right after port scanning. Automated tests are started of services that run behind open ports that have been discovered in port scanning. The Nmap scripting engine also has a module to execute general scripts to gather more information on the system under test. Another tool, Nikto, is implemented to test services that use Hypertext Transfer Protocol (HTTP). Port scanning and automated testing is time consuming, when scanning and testing is executed comprehensively. Sometimes it is crucial to obtain results in a short time, so there should be options on broadness of scanning and testing. Comprehensive scanning and testing may produce large amounts of scattered information so reporting of the results should be brief and clear to help penetration tester’s work. The performance of the scanning and testing implementation is evaluated by testing a single network host and flexibility is validated by running the scanning and testing on other network hosts.Black-box-tietoturvatestaus on jaettu viiteen vaiheeseen: tiedustelu, skannaus, hyödyntäminen, hyödyntämisen jälkeiset toimet ja raportointi. On olemassa paljon työkaluja ja metodeja tietoturvatestauksen tekemiseen hyödyntämisvaiheessa ja hyödyntämisen jälkeisissä toimissa. Tämän vuoksi kaksi ensimmäistä vaihetta on tärkeä suorittaa huolellisesti, jotta eri tietoturvatestausvaihtoehtoja voidaan vähentää. Skannausvaiheessa tietoturvatestaajan päämäärä on kerätä mahdollisimman paljon tietoa testikohteesta. Yksi tehtävä tässä vaiheessa on löytää avoimia verkkoportteja ja käytettyjä IP-protokollia. Nmap on porttiskannaustyökalu, jonka avulla voidaan selvittää verkkoporttien tilat sekä käytetyt verkkoprotokollat. Nmap sisältää erilaisia porttiskannaustekniikoita, joita tulee käyttää kattavien skannaustulosten saamiseksi. Eri skannaustekniikoista pitää yhdistellä tuloksia, joten skannaustekniikoiden antamat luokitukset tulee jakaa luotettaviin ja ei-luotettaviin tuloksiin. Kun porttiskannaus on suoritettu, varsinainen tietoturvatestaus voi alkaa. Testauksen voi automatisoida alkamaan heti porttiskannauksen jälkeen. Automaatiotestit ajetaan palveluihin, jotka toimivat avoimien porttien takana. Avoimet portit on tutkittu porttiskannausvaiheessa. Nmapin skriptityökalu sisältää myös moduulin, joka suorittaa yleisiä testejä testikohteeseen, millä saadaan lisätietoa testattavasta kohteesta. Toinen testaustyökalu, Nikto, on implementoitu testaamaan palveluja, jotka käyttävät Hypertext Transfer Protokollaa (HTTP). Porttiskannaus ja automatisoitu tietoturvatestaus vie aikaa, kun skannaus ja testaus suoritetaan kokonaisvaltaisesti. Joskus on kuitenkin tärkeää saada tuloksia lyhyessä ajassa, joten testaajalla tulisi olla eri laajuisia skannaus- ja testausvaihtoehtoja. Kokonaisvaltainen skannaus ja testaus voi tuottaa suuren määrän hajallaan olevaa tietoa, joten tulokset pitää raportoida lyhyesti ja selkeästi, jotta penetraatiotestaajan työ helpottuu. Skannaus- ja testausohjelman toimintakyky arvioidaan skannaamalla yksittäinen verkkolaite ja joustavuus muihin ympäristöihin varmistetaan skannaamalla ja testaamalla useampi verkkolaite

Xavier, Jose C. - One of the best experts on this subject based on the ideXlab platform.

  • Food spectrum and trophic position of an Arctic cephalopod, Rossia palpebrosa (Sepiolida), inferred by stomach contents and stable isotope (δ13C and δ15N) analyses
    'Inter-Research Science Center', 2019
    Co-Authors: Golikov Alexey, Ceia, Filipe R., Sabirov, Rushan M., Belyaev, Alexander N., Blicher, Martin E., Arboe, Nanette H., Zakharov Denis, Xavier, Jose C.
    Abstract:

    Rossia palpebrosa (Sepiolida) is the most abundant nekto-benthic cephalopod in the Arctic; however, its feeding and trophic ecology are largely unknown. This work aims to assess the role of this species in Arctic ecosystems based on the contents of its stomach and analyses of δ13C and δ15N stable isotopes in its beak. The main taxa identified in the food spectrum were Crustacea (frequency of occurrence: 52.1%), followed by Polychaeta (14.6%) and fishes (6.3%). Sipuncula and Echinoidea were occasionally found and were recorded here as R. palpebrosa prey for the first time, as well as Polychaeta and Euphausiacea. A significant geographic increase in δ13C values (mean ± SE, -19.3 ± 0.2‰) from the Barents Sea to West Greenland was found, but no significant ontogenetic increase, suggesting no migrations occurred among different water masses. Values of δ15N (8.7 ± 0.2‰) and trophic level (TL; 3.6 ± 0.1) revealed significant ontogenetic increases and an absence of geographic patterns, suggesting the trophic role of this species is similar throughout the studied part of the Arctic. Stable isotope values, TL and food spectrum for R. palpebrosa are close to Arctic nekto-benthic predatory fishes and shrimps, especially Pandalus borealis. However, sepiolids prey on organisms exceeding their own size and do not scavenge. A gradual ontogenetic decrease in isotopic niche width, while increasing diversity in the food spectrum of larger specimens, was observed in R. palpebrosa. However, δ13C values, i.e. variation in primary productivity supporting food sources, were more responsible for these ontogenetic differences in niche size than δ15N value

Xavier J. - One of the best experts on this subject based on the ideXlab platform.

  • Food spectrum and trophic position of an Arctic cephalopod, Rossia palpebrosa (Sepiolida), inferred by stomach contents and stable isotope (δ13C and δ15N) analyses
    2019
    Co-Authors: Golikov A., Ceia F., Sabirov R., Belyaev A., Blicher M., Arboe N., Zakharov D., Xavier J.
    Abstract:

    © Inter-Research 2019. Rossia palpebrosa (Sepiolida) is the most abundant nekto-benthic cephalopod in the Arctic; however, its feeding and trophic ecology are largely unknown. This work aims to assess the role of this species in Arctic ecosystems based on the contents of its stomach and analyses of δ13C and δ15N stable isotopes in its beak. The main taxa identified in the food spectrum were Crustacea (frequency of occurrence: 52.1%), followed by Polychaeta (14.6%) and fishes (6.3%). Sipuncula and Echinoidea were occasionally found and were recorded here as R. palpebrosa prey for the first time, as well as Polychaeta and Euphausiacea. A significant geographic increase in δ13C values (mean ± SE, .19.3 ± 0.2‰) from the Barents Sea to West Greenland was found, but no significant ontogenetic increase, suggesting no migrations occurred among different water masses. Values of δ15N (8.7 ± 0.2‰) and trophic level (TL; 3.6 ± 0.1) revealed significant ontogenetic increases and an absence of geographic patterns, suggesting the trophic role of this species is similar throughout the studied part of the Arctic. Stable isotope values, TL and food spectrum for R. palpebrosa are close to Arctic nekto-benthic predatory fishes and shrimps, especially Pandalus borealis. However, sepiolids prey on organisms exceeding their own size and do not scavenge. A gradual ontogenetic decrease in isotopic niche width, while increasing diversity in the food spectrum of larger specimens, was observed in R. palpebrosa. However, δ13C values, i.e. variation in primary productivity supporting food sources, were more responsible for these ontogenetic differences in niche size than δ15N values

Golikov Alexey - One of the best experts on this subject based on the ideXlab platform.

  • Food spectrum and trophic position of an Arctic cephalopod, Rossia palpebrosa (Sepiolida), inferred by stomach contents and stable isotope (δ13C and δ15N) analyses
    'Inter-Research Science Center', 2019
    Co-Authors: Golikov Alexey, Ceia, Filipe R., Sabirov, Rushan M., Belyaev, Alexander N., Blicher, Martin E., Arboe, Nanette H., Zakharov Denis, Xavier, Jose C.
    Abstract:

    Rossia palpebrosa (Sepiolida) is the most abundant nekto-benthic cephalopod in the Arctic; however, its feeding and trophic ecology are largely unknown. This work aims to assess the role of this species in Arctic ecosystems based on the contents of its stomach and analyses of δ13C and δ15N stable isotopes in its beak. The main taxa identified in the food spectrum were Crustacea (frequency of occurrence: 52.1%), followed by Polychaeta (14.6%) and fishes (6.3%). Sipuncula and Echinoidea were occasionally found and were recorded here as R. palpebrosa prey for the first time, as well as Polychaeta and Euphausiacea. A significant geographic increase in δ13C values (mean ± SE, -19.3 ± 0.2‰) from the Barents Sea to West Greenland was found, but no significant ontogenetic increase, suggesting no migrations occurred among different water masses. Values of δ15N (8.7 ± 0.2‰) and trophic level (TL; 3.6 ± 0.1) revealed significant ontogenetic increases and an absence of geographic patterns, suggesting the trophic role of this species is similar throughout the studied part of the Arctic. Stable isotope values, TL and food spectrum for R. palpebrosa are close to Arctic nekto-benthic predatory fishes and shrimps, especially Pandalus borealis. However, sepiolids prey on organisms exceeding their own size and do not scavenge. A gradual ontogenetic decrease in isotopic niche width, while increasing diversity in the food spectrum of larger specimens, was observed in R. palpebrosa. However, δ13C values, i.e. variation in primary productivity supporting food sources, were more responsible for these ontogenetic differences in niche size than δ15N value