Everand Logo

Welcome to Everand!

  • Discover millions of ebooks, audiobooks, and so much more with a free trial

    Only $11.99/month after trial. Cancel anytime.

    Python Passive Network Mapping: P2NMAP
    Python Passive Network Mapping: P2NMAP
    Python Passive Network Mapping: P2NMAP
    Ebook237 pages1 hour

    Python Passive Network Mapping: P2NMAP

    By Chet Hosmer

    3.5/5

    ()

    Read preview

    About this ebook

    Python Passive Network Mapping: P2NMAP is the first book to reveal a revolutionary and open source method for exposing nefarious network activity.

    The "Heartbleed" vulnerability has revealed significant weaknesses within enterprise environments related to the lack of a definitive mapping of network assets. In Python Passive Network Mapping, Chet Hosmer shows you how to effectively and definitively passively map networks. Active or probing methods to network mapping have traditionally been used, but they have many drawbacks - they can disrupt operations, crash systems, and - most importantly - miss critical nefarious activity. You require an accurate picture of the environments you protect and operate in order to rapidly investigate, mitigate, and then recover from these new attack vectors. This book gives you a deep understanding of new innovations to passive network mapping, while delivering open source Python-based tools that can be put into practice immediately.

    Python Passive Network Mapping is for practitioners, forensic investigators, IT teams, and individuals who work together when performing incident response and investigating potential damage, or are examining the impacts of new malware threats. Those defending critical infrastructures will have a special interest in this book, as active or probing methods of network mapping are rarely used within these environments as any resulting impacts can be disastrous. Python Passive Network Mapping is ideally suited for use as a text in a variety of academic programs to expose and engage students in the art of passively mapping enterprise networks, with the added benefit of providing exposure to open source Python solutions.

    • First book to show you how to use open source Python to conduct passive network mapping
    • Provides a new method for conducting incident response and investigating the extent of potential damage to your systems
    • Python code forensics toolkit for network mapping included on the companion website
    LanguageEnglish
    PublisherElsevier Science
    Release dateJun 10, 2015
    ISBN9780128027424
    Python Passive Network Mapping: P2NMAP
    Author

    Chet Hosmer

    Chet Hosmer serves as an Assistant Professor of Practice at the University of Arizona in the Cyber Operations program, where he is teaching and researching the application of Python and Machine Learning to advanced cybersecurity challenges. Chet is also the founder of Python Forensics, Inc. a non-profit organization focused on the collaborative development of open-source investigative technologies using Python and other popular scripting languages. Chet has made numerous appearances to discuss emerging cyber threats including NPR, ABC News, Forbes, IEEE, The New York Times, The Washington Post, Government Computer News, Salon.com, and Wired Magazine. He has 7 published books with Elsevier and Apress that focus on data hiding, passive network defense strategies, Python Forensics, PowerShell, and IoT.

    Read more from Chet Hosmer

    Related to Python Passive Network Mapping

    Related ebooks

    Security For You

    View More
    View More

    Related podcast episodes

    Related articles

    • Article

      Tsurugi Linux 2019.1

      Sep 24, 2019

      Tsurugi Linux 2019.1
      2 min read

    • Article

      The Logical Volume Manager

      Jul 2, 2019

      The Logical Volume Manager
      5 min read

    • Article

      Use Home Assistant NodeRED devices

      May 31, 2022

      NodeRED is an open source graphical programming environment that can be used to complete a large number of tasks. Graphical programming languages tend to be more intuitive than textual programming languages and can be easier to learn. Support is buil

      5 min read

    • Article

      Rokoko Studio 2.0

      Feb 23, 2021

      Rokoko Studio 2.0
      1 min read

    • Article

      Perl at 34

      Feb 8, 2022

      Perl at 34
      7 min read

    • Article

      Set Up Your First Database

      Aug 25, 2020

      Set Up Your First Database
      1 min read

    • Article

      Hacker’s Manual

      Nov 17, 2020

      Hacker’s Manual
      1 min read

    • Article

      In Cyberwar There Are No Rules

      Sep 10, 2018

      In Cyberwar There Are No Rules
      13 min read

    • Article

      Introducing Kali

      Mar 2, 2021

      Introducing Kali
      4 min read

    • Article

      Web App Security

      Jun 29, 2021

      Web App Security
      8 min read

    • Article

      “There’s A Big Difference Between Research Work And The Risk You’re Likely To Be Exposed To”

      Aug 7, 2022

      Most cyber-scare stories have more in common with horror fiction than practical reality, and I’m not talking purely about the hyped-up cyber-warfare stuff that appears online. Me being me, I’m focused on the hacking threat stuff. Regular readers of m

      6 min read

    • Article

      The Problem Solvers

      Sep 5, 2022

      I do worry about govt data collection, in particular the US FBI, even though I’m Australian it scares the heck out of me. They aren’t just spying on people, they act on it, too. Thousands of arrests are made every year due to the FBI or other alphabe

      5 min read

    • Article

      Best Mac Antivirus Software

      Sep 20, 2019

      Best Mac Antivirus Software
      20 min read

    • Article

      Supply Chain Attacks

      Aug 23, 2021

      Supply Chain Attacks
      4 min read

    • Article

      Secure Mobile Comms

      Dec 6, 2022

      Secure Mobile Comms
      9 min read

    • Article

      More Than Meets The Eye

      Aug 10, 2021

      More Than Meets The Eye
      5 min read

    • Article

      Digital Connection

      May 1, 2022

      Digital Connection
      6 min read

    • Article

      Best AV Software For Mac

      Mar 11, 2022

      Best AV Software For Mac
      15 min read

    Related categories

    Reviews for Python Passive Network Mapping

    3.5/5

    1 rating0 reviews

    What did you think?

    Tap to rate

    Review must be at least 10 words

      Book preview

      Python Passive Network Mapping - Chet Hosmer

      Python Passive Network Mapping

      P2NMAP

      Chet Hosmer

      Table of Contents

      Cover

      Title page

      Copyright

      Dedication

      Biography

      Preface

      Acknowledgments

      Chapter 1: Introduction

      Abstract

      Conventions Used in This Text

      What is Python Passive Network Mapping or P2NMAP?

      Why Does This Method Cast a Larger Net?

      How Can Active Network Mapping Actually Hurt You?

      Organization of the Book

      Review

      Summary Questions

      Chapter 2: What You DON’T Know About Your Network

      Abstract

      What’s Running on Your Network Might Surprise You

      OS Fingerprinting

      What Open Ports or Services Don’t You Know About?

      Who’s Touching Your Network?

      Review

      Summary Questions

      Chapter 3: Capturing Network Packets Using Python

      Abstract

      Setting up a Python Passive Network Mapping Environment

      The Art of the Silent Capture

      Python Source Code

      Review

      Summary Questions

      Chapter 4: Packet Capture Analysis

      Abstract

      Packet Capture Analysis

      Setting up Options for Analysis

      Performing Analysis

      Review

      Summary Questions

      Chapter 5: PCAP Extractor and OS Fingerprinting

      Abstract

      PCAP Extraction

      Passive OS Fingerprinting

      Review

      Summary Questions

      Chapter 6: Future Considerations and Challenge Problems

      Abstract

      Author Observations

      Author Predictions

      Challenge Problems

      More Information

      Subject Index

      Copyright

      Acquiring Editor: Chris Katsaropoulos

      Editorial Project Manager: Benjamin Rearick

      Project Manager: Priya Kumaraguruparan

      Designer: Matthew Limbert

      Syngress is an imprint of Elsevier

      225 Wyman Street, Waltham, MA 02451, USA

      Copyright © 2015 Elsevier Inc. All rights reserved.

      No part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or any information storage and retrieval system, without permission in writing from the publisher. Details on how to seek permission, further information about the Publisher’s permissions policies and our arrangements with organizations such as the Copyright Clearance Center and the Copyright Licensing Agency, can be found at our website: www.elsevier.com/permissions.

      This book and the individual contributions contained in it are protected under copyright by the Publisher (other than as may be noted herein).

      Notices

      Knowledge and best practice in this field are constantly changing. As new research and experience broaden our understanding, changes in research methods, professional practices, or medical treatment may become necessary.

      Practitioners and researchers must always rely on their own experience and knowledge in evaluating and using any information, methods, compounds, or experiments described herein. In using such information or methods they should be mindful of their own safety and the safety of others, including parties for whom they have a professional responsibility.

      To the fullest extent of the law, neither the Publisher nor the authors, contributors, or editors, assume any liability for any injury and/or damage to persons or property as a matter of products liability, negligence or otherwise, or from any use or operation of any methods, products, instructions, or ideas contained in the material herein.

      British Library Cataloguing-in-Publication Data

      A catalogue record for this book is available from the British Library

      Library of Congress Cataloging-in-Publication Data

      A catalog record for this book is available from the Library of Congress

      ISBN: 978-0-12-802721-9

      For information on all Syngress publications visit our website at http://store.elsevier.com/

      Dedication

      To our children who inspire me every day and make me realize how blessed I truly am. Whether you take care of the sick and injured, you teach and inspire future generations, you care deeply and fight to protect our environment or you simply bring unconditional love to everyone you touch. To Kira, Tiffany, Trisha and Matty.

      Biography

      Chet Hosmer is the Founder of Python Forensics, Inc. a non-profit organization focused on the collaborative development of open-source investigative technologies using the Python programming language. Chet is also the founder of WetStone Technologies, Inc. and has been researching and developing technology and training surrounding forensics, digital investigation and steganography for over two decades. He has made numerous appearances to discuss emerging cyber threats including National Public Radio’s Kojo Nnamdi show, ABC’s Primetime Thursday, NHK Japan, CrimeCrime TechTV and ABC News Australia. He has also been a frequent contributor to technical and news stories relating to cyber security and forensics and has been interviewed and quoted by IEEE, The New York Times, The Washington Post, Government Computer News, Salon.com and Wired Magazine.

      Chet serves as a visiting professor at Utica College where he teaches in the Cybersecurity Graduate program. He is also an Adjunct Faculty member at Champlain College in the Masters of Science in Digital Forensic Science Program. Chet delivers keynote and plenary talks on various cyber security related topics around the world each year.

      Chet resides with Wife Janet, Son Matthew along with his four legged family near Myrtle Beach, South Carolina.

      Gary C. Kessler, Ph.D., CCE, CCFP, CISSP, is a Professor of Homeland Security at Embry-Riddle Aeronautical University, a member of the North Florida ICAC (Volusia County Sheriff’s Department), and president and janitor of Gary Kessler Associates, a training and consulting company specializing in computer and network security and digital forensics. He is the co-author of two professional texts and over 70 articles, a frequent speaker at regional, national, and international conferences, and past editor-in-chief of the Journal of Digital Forensics, Security and Law. More information about Gary can be found at his Web site, http://www.garykessler.net.

      Preface

      It is Monday morning, July 6, 2015 and you have just returned from the long holiday weekend. On your desk sits a note that reads…

      A vulnerability has been discovered that may affect SCADA based networks. We need to determine if any of our systems are potentially vulnerable or worse have already been compromised. As you know, we cannot actively scan our SCADA network, so we need to passively map network activity and behaviors over the next week and then analyze the results. We need a way to determine/verify every end point on our network, what systems they communicate with, what countries those connections have made to and from.

      I Need prelim report by noon tomorrow.

      Thanks,

      the

      Enjoying the preview?
      Page 1 of 1