Network Security Toolkit NST

1
Network Security Toolkit (NST)
Ronald W. Henderson CTO UNIVERSAL Technologies,
LLC
2
NST Value Add
Network Security Toolkit (NST) NST is a
Linux-based live CD distribution that provides
easy access to best-of-breed Open Source Network
Security Applications. NST provides choice of
Network Security Applications using the Open
Source model.

• Design Goals
• Easy access and management of Network Security
  Applications.
• Security Toolkit designed for Network Security
  Administration.
• Enterprise class scalability and stability.
• Security Toolkit management via Virtual Network
  Computing (VNC), Web User Interface (WUI) or
  the command-line.
• Security validation testing suite for existing
  security architectures.
• Easy access to Network Security Application
  reports.
• Integrated Network Security Application
  components.
• Live update integration (Ex snort and nessus).

• Reference Site
• http//www.networksecuritytoolkit.org

3
Network Security Focus Areas
Network Scanning nessus, nmap
Network Intrusion Detection/Prevention Snort
(BASE and MySQL integration)
Web Server Scanning nikto, hammerhead
Virtual Network Simulation honeypot
Firewall/Management iptables, fwbuilder
Password Crackers/Generators john, crack, pwgen
Network Protocol Analyzer (LAN) ethereal, tcpdump
Network Monitoring (LAN) ntop, etherape,
tcptrack, argus
Wireless LAN Monitoring kismet, airsnort
Network Traffic Generators nemesis, tcpreplay,
packETH
VPNs IPsec, SSH
4
NST Build Process
5
NST Boot Process

• BIOS Setting Boot ordering CDROM boots
  prior to Hard Disk.

• Linux Kernel Support NST supports both SMP
• and Non-SMP kernels.
• Current Kernel Version 2.6.10-1.771_FC2smp

• NST Runtime Environment NST builds itself
  within the system RAM. No disk subsystem is
  altered in any way.

6
NST Access Channels

• Security Assessment
• Security Analysis
• Network Forensics

• Data Center Operations
• Headless Configuration
• Network IDS
• Network Monitoring

7
NST Web User Interface (WUI)
8
NST X Window System Ethereal
9
NST X Window System Nmap, NetWag
10
NST X Window System EtherApe
11
NST X Window System Firewall Builder
12
NST WUI (Network Monitoring) ntop
13
NST WUI (IDS) Snort
14
NST (IDS) Snort - Enterprise Deployment
15
NST Enterprise Monitoring Deployment
16
NST (Wireless Network Monitoring) Kismet
NST Equipment Setup
17
NST (Wireless Network Topology) Kismet
18
NST Demonstration
19
Contact Information
UNIVERSAL Technologies, LLC 194 Washington
Avenue, Suite 420 Albany, N.Y. 12210-2314 518-463-
6149
Upstate New York
UNIVERSAL Technologies, LLC 350 Fifth Avenue,
Suite 3304 New York, N.Y. 10118-0069 212-971-1320
NYC