Packet Capture and Analysis

COIT20262 Assignment 1 Submission Term 1, 2019
COIT20262 - Advanced Network Security, Term 1, 2019
Assignment 1 Submission
Due date: 5pm Friday 26 April 2019 (Week 6) ASSESSMENT
Weighting: 40%
1Length: N/A
Student Name: enter your name
Student ID: id
Campus: campus
Tutor: tutor
Advanced Network Security Page 1 of 7

COIT20262 Assignment 1 Submission Term 1, 2019
Question 1. Packet Capture and Analysis
Part (c) Message Sequence Chart
Advanced Network Security Page 2 of 7

COIT20262 Assignment 1 Submission Term 1, 2019
Part (d) Information from Packets
Information Answer
Time between <ENTER> on TCP 2.272 – 2.276
Packet numbers for question above 4 and 6
IP address and port of UDP client IP address – 192.168.2.21
Port number - 9113
MAC of UDP server MAC address – 08:00:27:c3:84:51
Hex value of timestamp 080a00027bcd0002bbae
Hex value of checksum c6f8
Part (e)
If it is assumed that the attacker is able to modify the source code of netcat by creating a new
program netcat2 the implementation of encryption of the messages would mitigate the risk
that the attacker cannot determine the messages sent between node 1 and node 2. RSA
encryption algorithm is used for encrypting the message and the public key is shared with the
receiver for the decryption of the message.
Part (f)
In case of a modification attack placed on UDP exchange and the unit code is changed from
COIT20262 to COIT20263 the server on node 3 would be unaware of the attack. This is
because the attacker would use the cookie stealing attack for gaining the access of the server
and then run malicious SQL code for modifying the database.
Part (g)
If a replay attack is performed on TCP exchange on the server and the messages are replayed
without any modification then also the server would be unaware of the attack. The data are
intercepted by performing the replay attack and retransmitted for causing masquerade such
that the server cannot detect the attack. Th e risk of replay attack can be mitigated with
tagging a session ID with each of the frames sent from the valid user end.
Advanced Network Security Page 3 of 7