Towards Lightweight Mobile Pentesting Tools to Quickly Assess Machine Security Levels

Aller, Inigo Llaneza; López, José Manuel Redondo; Martinez, Luis Antonio Vinuesa

doi:10.1109/tla.2019.8931199

Cited by 5 publications

(3 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This security gap exists from a long time, past researches [29], [30] considered vulnerability and patch management as solution for securing organization. Recent researches such as pen-test framework for mobile devices [31], they have considered testing of common security controls can access device security. this approach is prone to different type of attacks such as zero days, unknown threats and social engineering.…”

Section: Related Workmentioning

confidence: 99%

Offensive Security: Towards Proactive Threat Hunting via Adversary Emulation

et al. 2021

View full text Add to dashboard Cite

Attackers increasingly seek to compromise organizations' systems and data with advanced methods, often utilising legitimate tools. In the main, organisations employ reactive approaches to cyber security, focused on rectifying immediate incidents and preventing repeat attacks, through protections such as Security Information and Event Management (SIEM), firewalls, anti-spam/anti-malware solutions and system patches have been demonstrated to have significant weaknesses in addressing modern attacks. Proactive approaches, have been seen as part of the solution to this problem. However, techniques such as vulnerability and penetration testing (VAPT) are recognised as having limited scope and only working with threats that have already been discovered. Promising methods such as threat hunting are gaining momentum, enabling organisations to identify and rapidly respond to any potential attacks, though they have been criticised for their significant cost. In this paper, we present a novel model for uncovering tactics, techniques, and procedures (TTPs) through offensive security, specifically threat hunting via adversary emulation. The proposed technique is based on a novel approach of inducing adversary emulation (mapping each respective phase) model inside the threat hunting approach. The experimental results show that the proposed approach exploits the threat hunting via adversary emulation and has countervailing effects on hunting advance level threats. Moreover, the threat detection ability of the proposed approach utilizes minimum resources. The proposed approach can be exploited to develop the offensive security-aware environment for organizations to uncover advanced attack mechanisms and test their ability for attack detection.

show abstract

Section: Related Workmentioning

confidence: 99%

Offensive Security: Towards Proactive Threat Hunting via Adversary Emulation

et al. 2021

View full text Add to dashboard Cite

show abstract

“…We are planning to use these tools in higher education security-related courses, along with other complementary tools [32,33]. First users will be students from different courses of the School of Computer Engineering of the University of Oviedo [34].…”

Section: Systematic Validationmentioning

confidence: 99%

“…We can also find GUIs for nmap targeting Android devices. Examples are nmap-gui [50], Cydia Tweak Nmap GUI [51] and the lightweight pentesting tool Lightpen [33] that, although it does not allow to directly control nmap options, it could execute some of its most common scan types as part of its future plugins.…”

Section: Related Workmentioning

confidence: 99%

Towards Improving Productivity in NMapSecurity Audits

Redondo

Cuesta

2019

JWE

View full text Add to dashboard Cite

Maintaining an adequate security level in computer infrastructures, like Internet-facing web servers, requires periodic assessment of their vulnerabilities with specialized security tools. nmap is arguably the most popular one, due to its versatility, powerful features, and low resource usage. However, this versatility can turn its usage difficult and error-prone, as it implements a lot of features and reports errors at runtime. This can lead to suboptimal results while designing auditing tasks. This research aims to decrease this complexity by developing a web GUI that favors experimentation, on-demand scans, and provides solutions to several shortcomings detected in the official one. We complemented it with a Domain Specific Language that implements early detection and reporting of syntax, type, and semantic errors when creating audit tasks. Both expand nmap possibilities, creating robust, schedulable, distributable, and portable auditing tasks able to find anomalies analyzing their output. Our initial release shows that the web GUI has been well received by several security related media and professionals. The language can detect and report a wide range of potential errors, substantially increasing the robustness of the created tasks. Therefore,

show abstract