Cyber warfare tools: exploitation and attack frameworks for network security assessment

Cyber warfare, a term defined by Clarke (2010) as an action of a nation-state to effectively penetrate another nation's computer resources or networks for the sole purpose of causing malicious damage or even disruption is a major cause of national and global security concerns (p.6).In this paper, we identify some cyber warfare tools (either Attack, Defense, Exploitation), and write a scenario to execute the tools. We also identify if the tool is for UNIX or Windows hacks, Router Attacks, etc. Also identified is why you would want to use the tool as opposed to another tool which may conduct the same form, via comparison and contrast.

Cyber warfare tools

These are the tools that are used in carrying out cyber warfare activities. They may either be attack tools, defense tools as well as exploitation tools.

Exploitation tools

Vulnerability exploitation tools are the tools that are used for gathering information on a given network. These tools are used for assessing the vulnerability points in a give network. They include but not limited the following. Nessus, Metasploit, Core Impact, SQLMap, Social Engineer Toolkit, sqlininja, BeEF, dradis and WebGoa among others (SecTools,2012).In this category, we are going to discuss Nessus.

Nessus is noted by Tenable (2012a) to be the most widely used/deployed vulnerability as well as configuration assessment product having more that over 5 million downloads. The software features several features like high-speed discovery, asset profiling, configuration auditing, sensitive data discovery, and vulnerability analysis as well as patch management integration of a given system. The product can be used for checking credentials in both Unix and Windows systems (Tenable,2012b).

Merits

This tool is better than Metasploit, Core Impact, SQLMap, Social Engineer Toolkit, sqlininja, BeEF, dradis and WebGoa due to its high level of accuracy, functionality, versatility (Unix and Windows based) as well as its integrated nature.

Attack tools

Attack tools are the cyber warfare tools that are used for the attack of a nation state's computing resources. They include Hydra GTK, MetaSploit, AirSnort, Cain & Abel and Ethereal among others. In this section we are going to discuss MetaSploit.

Merits

The MetaSploit framework appears to be far more superior to the rest of the attack tools since it has more functionality like network scanning, exploitation, smart brute forcing, social engineering as well as VPN and proxy pivoting with a stealth functionality that allows for a deeper penetration and attack of the target network.

Defense

Defense tools are used for guiding a given network against attacks. They defend the given network against access as well as escalation tools such as MetaSploit and CANVASS. These tools revolve around the principles of well written as well as implemented network password policy, system hardening as well as patching (Andress & Winterfeld,2011,p.105). Examples of defense tools include firewalls, network hardening software, antivirus and anti-spam software among other. Example are Solarwinds and Kaspersky Antivirus/Internet Security. In this case we chose Kaspersky Antivirus and Internet Security Software due to its integrated nature.

Kaspersky offers an integrated solution comprising of File Antivirus, Mail Antivirus, IM Antivirus, Web Antivirus, Fire Wall, Proactive Defense, Ant-Spam, Network Attack Blocker, Anti-Phishing, Anti-Banner among others.

Merit

The main advantage of choosing Kaspersky is that in offers an integrated network defense solution thereby leading to more secure defense of the target network.