B mn MMT&VT Khoa CNTT - Trng H KHTN Tp.

HCM
1

An ninh Mng Project #2
Tn mn hc: An ninh Mng
GVLT: TS Trn Trung Dng
GVTH: Nguyn Vn Giang, Nguyn Thanh Qun, ThS L H Minh
Trong An ninh Mng, vic bt v phn tch cc gi tin rt quan trng, thng c s
dng trong network forensics, phn tch cc giao thc hay debug, pht trin h thng
mng, v.v
Project #2 hng sinh vin vo vic phn tch cc gi tin bng cch s dng cc cng c
phn tch nh Wireshark. Cc tp tin lu li qu trnh bt gi tin s c cung cp theo
tng cu hi tip theo y, sinh vin phn tch cc gi tin tng ng tr li cho cc
cu hi ny.
Trace 1: HTTP Trace
Phn tch cc gi tin bt u t a ch IP 128.12.173.14 v cho bit:
1. Nhng site no c truy cp? Ghi r tn min tng site.
2. Trn cc site , ngi dng tm kim vi t kha no tng ng vi site?
3. Lit k cc a ch IP ch ca cc site c truy cp.
Trace 2: HTTPS Trace
Phn tch cc gi tin bt u t a ch IP 128.12.173.14 v cho bit:
4. Nhng tn min no c phn gii v nu a ch IP tng ng.
5. Quan st cc gi tin https u tin v xc nh:
a. Tn thut ton m ha c s dng
b. Kha l g v kch thc kha c s dng m ha.
c. Thi gian (ngy, gi) ht hn chng thc.
d. Nu cc b m (cipher suite) c h tr bi trnh duyt (client)
e. Nu cc b m (cipher suite) c h tr bi server.
Trace 3: FTP Trace
6. Nu tn v mt khu c s dng ng nhp FTP server?
B mn MMT&VT Khoa CNTT - Trng H KHTN Tp. HCM
2

7. Xc nh xem kt ni FTP l active hay passive. Gii thch ngn gn s khc nhau
gia active FTP v passive FTP.
8. Nhng file no c download, nu r tn, ng dn v kch thc tng file.
Trace 4: TraceRoute
Phn tch cc gi tin bt u t a ch IP 128.12.173.14 v cho bit:
9. Cng c TraceRoute c s dng tm nh tuyn n site no? Ghi r a ch
IP ca site .
10. Lit k cc a ch IP quan st c trong qu trnh nh tuyn t IP ngun n IP
ch.
Trace 5: POP3 Trace
11. Cho bit tn v mt khu ng nhp ca ti khon email dng.
12. C bao nhiu emails c nhn bi ti khon trn. Cho bit cc thng tin chi
tit ca cc trng sau i vi tng email: from, subject, date.
Traces 6,7,8 & 9
Cc files tng ng th hin cho vic tn cng mng. Sinh vin phn tch v tr li cc
cu hi sau:
13. Xc nh phng thc tn cng v mc ch ca tn cng .
14. Xc nh tn min (nu c) trong mi tn cng.