Frank Domizio | Education


Drexel University	Villanova University
College of Computing and Infomatics	College of Engineering
Bachelor of Science Degree in Computing and Security Technology	Master of Science Degree in Cybersecurity Engineering

Major Coursework in:

Web Developement

Flash Sample

Click here to open my former flash landing page in a new window.

HTML/CSS/JavaScript Code Sample

Say Cheese Philly Project

<!DOCTYPE html>

<cke:html>
		


	<cke:head >
	<!--{cke_protected}{C}%3C!%2D%2D%20Say%20Cheese%20Philly%20%20%0D%0A%09%20%20%20%20Autor%3AManuel%20Hakimian%20and%20Frank%20Domizio%0D%0A%09%20%20%20%20Date%3A10%2F3%2F2012%0D%0A%09%20%20%20%20main%20page%0D%0A%09%2D%2D%3E-->
		<cke:encoded>%3Cmeta%20charset%3D%22UTF-8%22%20%2F%3E</cke:encoded>
		<cke:title> Say Cheese Philadelphia</cke:title>
		<cke:encoded>%3Cmeta%20name%3D%22description%22%20content%3D%22Say%20Cheese%20Philadelphia%20%7C%20Philadelphia's%20desination%20gourmet%20lunch%20truck%20for%20the%20most%20delicious%20grilled%20cheese%20meltiness.%20Get%20that%20Cheese.%22%3E</cke:encoded>
		<cke:encoded>%3Clink%20href%3D%22jstyles1.css%22%20rel%3D%22stylesheet%22%20type%3D%22text%2Fcss%22%20%2F%3E</cke:encoded> 
		<!--{cke_protected}%3Cscript%20type%3D%22text%2Fjavascript%22%3Evar%20switchTo5x%3Dtrue%3B%3C%2Fscript%3E-->
<!--{cke_protected}%3Cscript%20type%3D%22text%2Fjavascript%22%3Evar%20switchTo5x%3Dtrue%3B%3C%2Fscript%3E-->
<!--{cke_protected}%3Cscript%20type%3D%22text%2Fjavascript%22%20src%3D%22http%3A%2F%2Fw.sharethis.com%2Fbutton%2Fbuttons.js%22%3E%3C%2Fscript%3E-->
<!--{cke_protected}%3Cscript%20type%3D%22text%2Fjavascript%22%20src%3D%22http%3A%2F%2Fs.sharethis.com%2Floader.js%22%3E%3C%2Fscript%3E-->
	</cke:head/>
	<!--{cke_protected}{C}%3C!%2D%2D%0D%0A%3Cscript%20type%3D%22text%2Fjavascript%22%3E%0D%0A%09%09%2F*%20%3C!%5BCDATA%5B%20*%2F%0D%0A%09%09var%20curBanner%3D%22cycle1%22%3B%0D%0A%0D%0A%09%09function%20changeBanner()%20%7B%0D%0A%09%09if%20(curBanner%20%3D%3D%20%22cycle2%22)%20%7B%0D%0A%09%09%09document.images%5B1%5D.src%20%3D%20%22.%2Fimages%2F01.jpg%22%3B%0D%0A%09%09%09curBanner%20%3D%20%22cycle1%22%3B%0D%0A%09%09%7D%0D%0A%09%09else%20%7B%0D%0A%09%09%09document.images%5B1%5D.src%20%3D%20%22.%2Fimages%2F02.jpg%22%3B%0D%0A%09%09%09curBanner%20%3D%20%22cycle2%22%3B%0D%0A%09%09%7D%0D%0A%09%09%7D%0D%0A%0D%0A%09%09%09%09%0D%0A%09%09%2F*%20%5D%5D%3E%20*%2F%0D%0A%09%09%3C%2Fscript%3E%0D%0A%2D%2D%3E-->

	<cke:body >
		<!--{cke_protected}{C}%3C!%2D%2D%20Facebook%20footer%20code%2D%2D%3E-->

		
		<div id="bodycolor">

		<cke:header>
			<p>.
			</p>
		 
			<hgroup id="hbar">
			
		 <img  data-cke-saved-src="./images/logo.png" src="./images/logo.png" alt="Say Cheese Philly  " />
		 <img id="banner" width="800px" height="140px"  data-cke-saved-src="./images/SayCheesePhilly.png" src="./images/SayCheesePhilly.png" alt='Say Cheese Philly | Gourmet Grilled Cheese Meltiness' border=0 /></a><br>

			</hgroup>
			
		</cke:header>
		
		
			<!--{cke_protected}{C}%3C!%2D%2D%0D%0A%09%09%09%3Csection%20id%3D%22hor%22%3E%0D%0A%09%09%09%09%3Cimg%20src%3D%22.%2Fimages%2Flogo.png%22%20alt%3D%22Say%20Cheese%20Philly%20%20%22%20id%3D%22logo%22%20%2F%3E%0D%0A%09%09%09%3C%2Fsection%3E%0D%0A%09%09%2D%2D%3E-->

			
			<section >
				<hgroup id="vbar">

				<div id="verU"> 
				</div>

			<nav id="nav">
	 
				<ul> 
					<li><a  data-cke-saved-href="index.html" href="index.html"> Home</a></li>
					<li><a  data-cke-saved-href="menu.html" href="menu.html">Menu</a></li>
					<li><a  data-cke-saved-href="reviews.html" href="reviews.html">Reviews</a></li>
					<li><a  data-cke-saved-href="team.html" href="team.html"> Meet the team </a></li>
					<li><a  data-cke-saved-href="sandwich.html" href="sandwich.html"> Create </a></li>
					<li><a  data-cke-saved-href="pick.html" href="pick.html">pick</a></li>
				</ul>
			</nav>

				<div id="verD">
				</div>
				</hgroup>

		<article id="video">
			
			<iframe src="http://player.vimeo.com/video/35981557?badge=0" width="600" height="450" frameborder="0" webkitAllowFullScreen mozallowfullscreen allowFullScreen></iframe> <p> <!--{cke_protected}{C}%3C!%2D%2D%20%3Ca%20href%3D%22http%3A%2F%2Fvimeo.com%2F35981557%22%3Euwishunu%20101%20-%20Say%20Cheese%20Philadelphia%3C%2Fa%3E%20%3C%2Fp%3E%0D%0A%09%09%09%3C!%2D%2D%3Cp%3E%3Cimg%20src%3D%22.%2Fimages%2F01.jpg%22%20height%3D%22400px%22%20width%3D%22500px%22%20alt%3D%22slide%20images%22%20%20%2F%3E%3C%2Fp%3E%0D%0A%09%09%09%3C!%2D%2D%0D%0A%09%09%09%3Cp%3E%3Cimg%20src%3D%22.%2Fimages%2F01.jpg%22%20height%3D%22400px%22%20width%3D%22500px%22%20alt%3D%22Banner%20images%22%20%20%20onmouseover%3D%22var%20pause%3DstartStop(1)%22%20onmouseout%3D%22var%20start%3DstartStop(0)%22%20%2F%3E%3C%2Fp%3E%0D%0A%09%09%09%2D%2D%3E-->
			</article>

			</section>

			
<aside id="twitter">

<!--{cke_protected}{C}%3C!%2D%2D%20BEGIN%3A%20Twitter%20Website%20Box%20(http%3A%2F%2Ftwitterforweb.com)%20%2D%2D%3E-->
<div style="width:250px;font-size:8px;text-align:right;"><!--{cke_protected}%3Cscript%20type%3D%22text%2Fjavascript%22%3E%2F%2F%3C!%5BCDATA%5B%0D%0Adocument.write(unescape(%22%253Cscript%20src%3D'http%3A%2F%2Ftwitterforweb.com%2Ftwitterbox.js%3Fusername%3Dsaycheesephilly%26settings%3D1%2C1%2C2%2C250%2C400%2Ce4d8c0%2C0%2Cd33a39%2C101b53'%20type%3D'text%2Fjavascript'%253E%253C%2Fscript%253E%22))%3B%0D%0A%2F%2F%5D%5D%3E%3C%2Fscript%3E--></div>
<!--{cke_protected}{C}%3C!%2D%2D%20END%3A%20Twitter%20Website%20Box%20(http%3A%2F%2Ftwitterforweb.com)%20%2D%2D%3E-->

</aside>
	
			
</div>

<section id="share">

		<!--{cke_protected}%3Cscript%20type%3D%22text%2Fjavascript%22%3EstLight.options(%7Bpublisher%3A%20%22808b260f-4956-401e-9861-95c81972e59e%22%7D)%3B%3C%2Fscript%3E-->
<!--{cke_protected}%3Cscript%3E%0D%0Avar%20options%3D%7B%20%22publisher%22%3A%20%22808b260f-4956-401e-9861-95c81972e59e%22%2C%20%22position%22%3A%20%22left%22%2C%20%22ad%22%3A%20%7B%20%22visible%22%3A%20false%2C%20%22openDelay%22%3A%205%2C%20%22closeDelay%22%3A%200%7D%2C%20%22chicklets%22%3A%20%7B%20%22items%22%3A%20%5B%22facebook%22%2C%20%22twitter%22%2C%20%22pinterest%22%2C%20%22linkedin%22%2C%20%22email%22%2C%20%22sharethis%22%5D%7D%7D%3B%0D%0Avar%20st_hover_widget%20%3D%20new%20sharethis.widgets.hoverbuttons(options)%3B%0D%0A%3C%2Fscript%3E-->
</section>
		<footer>
			<!--{cke_protected}{C}%3C!%2D%2D%20invisible%20copyrigt%2D%2D%3E-->
			<p> Copyrighted by Manuel Hakimian and Frank Domizio</p>	
			
		</footer>

	
	</cke:body>

<cke:html>

/*START OF CSS*/

body {
margin: 0px auto;
padding: 0px;
line-height: 1.5em;
font-family: Verdana, Geneva, sans-serif;
width:1200px;
}

body{
	
	background-color:  #101b53;
	box-shadow: 3px 3px 4px #000;

	
	

}

#bodycolor {
	background-image:url("./images/background4.jpg");
	height: 1000px;
	/*
	background-color: red;
	
	*/
}

#ver{
	background-color: #e4d8c0;
	box-shadow: 3px 3px 4px #000;
	margin-left: 100px;
	width: 200px;
	height: 500px;

}



nav{
	width: 200px;
	min-height: 1000px;
	background-color: #e4d8c0;
	text-align: center;
	margin-left: 100px;
	box-shadow: 3px 3px 4px #000;

	

}
/*
nav li img{
	width:100px;
	text-align: center;
	box-shadow: 3px 3px 4px #000;
}
*/
nav li{
	display: block;
	vertical-align: center;
	line-height: 25px;
	/*padding-right: 0.5em;*/
	background-image:url('./images/btn1.png'); /*btn1 */
	background-repeat: no-repeat;
	color:#C0C0C0;



}
 nav ul 
{
	margin-top: 85px;
list-style-type:none;


overflow:visible;
margin-left: -39px;
display: inline-block;
}
 
nav a:link, nav a:visited
{
width: 150px;
height: 50px; 
display:block;
font-weight:bold;
text-align:center;
padding:10px;
text-decoration:none;
text-transform:uppercase;
color:#e4d8c0;
}

nav a:hover, a:active
{
color:#d33a39 ;
text-decoration: underline;
}
/* #4D4DFF;*/



header {
width: 100%;
float: left;
font-size: 2em;
font-family: cursive, Geneva, sans-serif;
height: 200px;


}
header img
{
	margin-left: 100px;
}
header h2{

text-align: justify;
font-weight: lighter;


}

header p {

    content: '.';
    visibility: hidden;
    height: 5px;

}

header hgroup{
	

	
	background-color: #e4d8c0;

}


header h1 {
margin: 1em 0em;
font-size: 2em;
box-shadow: 3px 3px 4px #000;

}


h1, h2, h3, h4, h5, h6 {
font-family: Arial, Helvetica, sans-serif;
}

h2 {
	
margin: 1em 0em;
font-size: 1.5em;
}


header h2 {
font-size: 1.2em;
font-style: italic;
margin: 0em;
padding-bottom: 0.5em;

}

header img {
	max-width: 200px;
	max-height: 200px;
}

p{
	text-align: justify;
}

article {
	margin-left: 250px;
	margin-top: -250px;
}

#banner{
	padding-top: 15px;
	max-width: 1000px;
	margin-left: -100px;
	margin-right: 50px;
	position: relative;
	float: right;
}

/* home page */
#twitter {
	margin-left: 940px;
	margin-top: -445px;
	text-align: right;
	width: 250px;
	padding:0px;

}

#video{
margin-top: -700px;
margin-left: 320px;
width: 500px;
height: auto;
}

/* team page */
#teamPics img {

	box-shadow: 3px 3px 4px 4px #000;
	background-color: transparent;
}

#teamPics{
	width: 800px;
	height: 700px;
	margin-left: 400px;
	margin-top: -750px;
}
aside #pic2 , #pic3 {
	height: 300px;
	width: 200px;
	margin: 20px;

}

aside #pic1 , #pic4 {
	height: 200px;
	width: 300px;
	margin: 30px;

} 

/* End of team page style */

/* Review page */

#review {
	
	margin-top: -725px;
	margin-left: 350px;
	width: 800px;
	height: 650px;
	/*background-color: #e4d8c0;*/
	box-shadow: 5px 5px 6px #000;
	background-image:url('./images/Say_Cheese_tablecloth.jpg');
	background-repeat: no-repeat;
	background-size: cover;
#review	p h1
{
text-shadow: 10px 2px #ff0000;
} 
	
}

#review p{
	
}
/*
.reviewItems{
	display: block;
	background-color: #e4d8c0;
	box-shadow: 5px 5px 6px #000;


}

*/

/* Sandwich page */
#sandwich {
	
	
	margin-top: -725px;
	margin-left: 350px;
	padding-bottom: 10px;
	width: 800px;
	height: 650px;
	background-color: #e4d8c0;
	box-shadow: 5px 5px 6px #000;
	

	

}
#sandwich ul{
	
	text-align: justify;
	float: left;
}


#sandwich button {
	margin-left: 200px;
	
}

#sandwich h1{
text-align: center;
padding-top: 5px;
}
.box{
	
	width: 350px;
	height: 150px;

}

#formHeader{
	width: 350px;
	margin-bottom: -10px;
}


/*end of sandwich page */

/*menu page */


/*start of menu page style*/
/* menu page*/
/*slide show styles */
#menuItems{
	display: block;
	float: left;

	margin-top: -735px;
	margin-left: 350px;
	position: relative;
	padding-bottom: 10px;
	width: 800px;
	height: 700px;
	background-color: #e4d8c0;
	box-shadow: 5px 5px 6px #000;

}
#menuItems ul{
	float: left;
}

#slideshow{

	width: 400px;
	height: 300px;
	float: left;
	box-shadow: 3px 3px 4px 4px #000;

}


#slideshow img{
		box-shadow: 3px 3px 4px #000;
}

/*facebook buttons  important because we are overriding their style*/
#sthoverbuttons{
	margin-top: 55px !important;
}

footer p {
	display: none;
}

Database Adminstration

Oracle SQL Code Sample

Doctor's Office Project Select Statements

---office hours
select o.* from office_hrs o 
  where office_id = '&Office_id'
  and office_day = '&day_of_week'
  order by office_day;
  
---dr hours with dr variable
select d.dr_id, l.day_name, d.dr_hrs, d.Dr_Office
  from dr_hours d
  join day_lookup l
    using (day_id)
  where dr_id = '&dr_id'
  order by day_id;
  
---joins for Specialty
select dr_id, b.Dr_lastname, spec_id, s.dr_spec
  from dr_bio b 
    join Dr_specialty d
      using (dr_id) 
    join specialty s
      using (Spec_id)
      order by dr_id;     
        
---exam room scripts
insert into exam_rooms
  values ('&Room#', '&Office_ID', '&Patient_ID', '&Dr_Id', '&Nurse_Id');
  
select * from exam_rooms;
  
delete from exam_rooms
  where exam_id = '&Room#' and Office_ID = '&Office_ID';
  
---average age of patients
select trunc ( avg(sysdate - pt_dob) /365.24,0) as Average_Age
  from patientbio;
  
---appointments by date to contact patient
select a.app_date as Appointment_date, a.app_time as Appointment_Time, a.office_id, p.pt_firstname, p.pt_lastname, p.pt_phone1, p.pt_phone2
  from appointments a
  join patientbio p
  using (pt_id)
    where app_date = to_date('&date', 'mm-dd-yyyy' );
    
---find a phone number to a patient's pharmacy with soundex
select p.pt_firstname, p.pt_lastname, ph.pharm_name, ph.pharm_phone, ph.pharm_fax
  from patientbio p
    join Pt_pharm

Information Security

IT Security Research Project

ETTERCAP
Overview
Ettercap is a free and open source penetration testing tool that is
distributed under the GNU license. It can be used to engage in man-in-themiddle
attacks on a local area network. Man-in-the-middle attacks
logically place the attacking machine between the victim and its router.
The attacker accepts packets, reads them and then forwards them to their
destination. It can also be used to analyze computer network protocols and
to audit the security of systems. Ettercap is available for Unix/Linux, Mac
OS X, BSD and Windows. It is available in a graphical user interface (GUI)
version and a command-line interface (CLI) version. Ettercap is ranked
#16 on the list of computer security tools produces by Sectools.org.
Ettercap has many uses for both network security professionals and
script kiddies. Once Ettercap has been placed in the middle of a switched
connection, it can capture all communication between its victims. While
there it is capable of character injection, packet filtering, automatic
password collection for many common protocols, SSH1 decryption, HTTPS
decryption (as long as the victim accepts a fake certificate), PPTP attack
and it can kill any arbitrary connection. It can also perform the following
reconnaissance operations: active OS fingerprinting, passive LAN
scanning, IP and MAC sniffing, search for other ARP poisoners and NICs
in promiscuous mode and forgery of frames and packets.
Installation
Ettercap can be downloaded from sourceforge.com. It also comes
pre-loaded in Backtrack 5 R3. I used Backtrack for my testing of Ettercap
but I have read that Linux installation is fairly simple. The tarball files of
versions 0.7.2, 0.7.3, 0.7.4 and 0.4.4.1 can be downloaded easily from
sourceforge.com. It does require OpenSSL to support Secure Sockets Layer
and Transport Layer Security. Most distros include OpenSSL but up-todate
libraries can be downloaded from openssl.org. I have also read that
Windows installations of Ettercap can be challenging and the usability and
documentation compared to that of Linux versions are not even close.
Use of Ettercap
My first experience with Ettercap was a frustrating one. I did not find
the program, even with the GUI to be very intuitive. My first self-appointed
task was to attempt to use the GUI to ARP poison my home network. Since
I could not just figure it out I was able to find documentation on the
Internet that described how to perform this easily using the GUI. It advises
to choose an interface to operate on then to scan that network for hosts.
The problem is that each time I attempted to scan for hosts on the network,
Ettercap shutdown. After trying several times and following the directions
by the letter, I determined that I was not doing anything wrong and set out
to the Internet to see if there were bugs in the program. I found several
forums that said there were in fact bugs in the code and how to fix it.
Again, I tried several times to make the suggested changes to the code with
no luck. Having spent several hours getting frustrated by the GUI and with
three credits of college Linux under my belt, I set out to make Ettercap
work using the CLI.
When the CLI option is run in Backtrack 5, Ettercap responds with
all the switches that can be used with the ettercap command. I chose to run
ettercap -TQM arp:remote -i wlan0 /192.168.1.103/ // -P
remote_browser. To break down this command -T run the program in
text only mode, -Q runs in quiet mode, -M runs the man-in-the-middle
attack, arp:remote -i wlan0 /192.168.1.103/ runs the ARP poisoning on IP
address 192.168.1.103 on the wlan0 interface, and -P remote_browser
engages the option to have the browser on the attacking computer mimic
the actions of the browser on the victim computer. The following picture is
what the results of this command look like:
These results are much better than that of the GUI albeit not exactly what I
expected. The remote browser option did not work. It did give the web sites
that the victim machine was visiting but the browser on the attacking
computer did not load them. Also, running in quiet mode did not produce
the actual packets being sent. I removed these switches and ran the attack
again.
Turning quiet mode off certainly made the results more interesting. I got to
see the packets traveling my network. Often, the packets were going by too
fast to keep up with the information they were carrying. I attempted to
authenticate to Facebook.com to see if I could catch the username and
password. It seems that the SSL tunnel provided by HTTPS did its job and
did not transmit the information in plain text. Once of the options that was
touted in the documentation that I read was that Ettercap would provide a
fake certificate to the victim, in essence performing a social engineering
attack that would allow the SSL tunnel to run through the attacking
computer. This did not happen. I was never presented with the option to
accept an unsigned certificate which I gladly would have done to see if
Ettercap would show me passwords sent via HTTPS.
Conclusion
Ettercap is a good tool, not a great tool. It performs man-in-themiddle
attacks right out of the box. There is enough documentation to
allow even the most uninformed script kiddie to take over a network and
capture packets. If time is taken to read the list of switches and attention
paid to the functions that they perform, it is not very difficult to issue the
necessary command-line commands to successfully ARP poison a network
segment and its hosts.
In my opinion, for every good point of Ettercap there were two bad
points. The fact that the GUI does not work out of the box is very
disappointing. I am no Linux hacker, but even with the changes suggested
by the hacker community I was unable to get it to work. I am no expert but
as a junior information technology student and one of the top engineering
universities in the country I feel that I should be able to get it to work. I
was also frustrated that I could not get the remote browser option to work.
I think having the browser on the attacking computer follow the browser
on the victim system would be, if nothing else, neat.
Maybe the learning curve with Ettercap is greater than those of the
other tools that I have used or maybe I just do not know enough about
computer security but I found Ettercap to be difficult and frustrating to
use. It has many bugs and does not live up to the billing that I have
encountered. I would like to spend more time with this application to see if
I could get it to do the things that I want, but until then I believe if the need
arises to use a packet catcher I would choose Wireshark.
NESSUS
Overview
Nessus is a network security tool designed to automate the testing
and discovery of known security problems. Nessus is considered to be one
of the best vulnerability scanners available. Sectools.org calls it, the
world's most popular vulnerability scanner. It is estimated that it is used
by over 75,000 organizations worldwide.
The software is named for Nessus the centaur from Greek mythology.
Nessus the centaur was killed by Heracles who was in turn killed by
Nessus's blood. This may be an allusion to the fact that the same
application that hackers use to find vulnerabilities in their potential
victims also helps security professionals thwart the efforts of the hackers.
Nessus is distributed free for home use. The home license allows for
the scanning of 16 IP addresses. For use in the enterprise, companies can
subscribe Nessus ProfessionalFeed which is ostensibly the same product
but allows for vulnerability scans of unlimited IP addresses.
ProfessionalFeed subscribers also have access to online training and
support through Tenable Network Security, the distributor of Nessus.
The latest version, Nessus 5.0, was released in February of 2012. A
YouTube video produced by Tenable and released to coincide with the
release of the new version of the software lists five major improvements.
1. Installation and configuration of the scanner itself
2. Scan policy creation and design
3. Scan execution & results monitoring
4. Result filtering and report customization
5. Debugging and troubleshooting
Installation
Tenable claims that installation of Nessus 5.0 is easier than previous
versions. While it did not take any bash or dos commands to install, as
some of the other tools I used did, it was not like installing an IOS
application either. I chose to install Nessus on a netbook running
Backtrack Linux which may have made it more challenging. There are
many steps to complete and you must obtain an activation code if you
have no done so previously.
The prompts are plentiful yet comprehensive making for a time consuming
but relatively painless installation.
Scanning
Scanning for vulnerabilities with Nessus is a relatively
straightforward process. You must choose a target to scan. Your target can
be in the form of an IP address or a Fully Qualified Domain Name (FQDN).
Nessus also ships with several scanning policies. This allows for nearly
immediate use after installation.
Users can choose to create their own scan policy. There are four tabs
that must be considered when creating a new policy.
1. General contains six distinct boxes that group various
configuration options together. Basic, Scan, Network Congestion,
Port Scanners, Port Scan Options, and Performance.
2. Credentials allows the user to enter various types of credentials to
allow Nessus to authenticate enabling it to determine patching. The
drop-down menu allows you to configure credentials for Windows,
SSH, Kerberos, and Cleartext. The cleartext option is strongly
discouraged by Tenable. They suggest the use of encrypted
authentication whenever possible.
3. Plugins allows the user to pick a specific plugin family or individual
checks. There is an extensive list of families for various operating
systems which contain more specific scans. It is possible to choose
the entire family or individual scans.
4. Preferences allows for granular control over scanning policy
settings. Contains a dynamic list which changes as plugins and
policies from the other tabs are adjusted.
Since I do not have any experience with Nessus, I chose to employ one
of the included scan profiles for my first few attempts. The first scan I
performed was the Internal Network Scan since it seemed like the least
intrusive. I chose to scan my website PhillyPolice.com figuring if I did any
damage I know I have SLAs with the web vendor. The results were positive.
A few medium but acceptable risks and the rest low risk or info.
A feature I really enjoyed was the explanation of the various results.
All that was necessary was clicking the result in question and you get a
pop-up with a short explanation. The pop-up also includes a link where
you can obtain more information which is at the very least a necessity for a
security neophyte such as me. The pop-up contains data like the plugin
that found the issue, the severity of the problem, a short description of the
problem and various other information.
Since I am unwilling to infect my system with malware to prove that
Nessus can find the infection, the following is information I gleaned from
various blogs and other online publications.
Nessus can be an effective at identifying known malware running on
target systems. Many antivirus programs do not evaluate the entire known
malware sample. Nessus can locate polymorphic and mutating viruses that
some antivirus software would not be able to locate. It will report if the
scanned host is on a list of known botnets, if there is communication with
an IP known to be associated with a botnet, or if the host is infected with
content associated with botnet propagation.
The credentialing feature of Nessus allows it to authenticate on a
Windows system to check the processes that are running on a system. The
processes are checked against the databases of 25 AV products without
having to run them all. The only requirements for the Malicious Process
Detection plugin are the proper credentials to log in to the Windows
system and the ability for the Nessus scanner to perform DNS lookups.
Conclusion
Even having extremely limited experience with Nessus and an
emerging interest in computer security, it is apparent that Nessus is a
powerful tool. The ease of use and the plethora of information that it
provides makes it well-suited for the neophyte. Nessus has been on the
scene for many years. There is a ton of documentation to be found on the
Internet. From YouTube videos to blog posts to actual documentation from
Tenable, a great portion of Nessus's value is the information available to
guide the usage of the application.
Etherape
Overview
Etherape is a graphical network monitoring tool for Unix. It is free
and open source and is distributed under the GNU public license. It shows
all traffic on the chosen network interface by displaying lines that connect
nodes on the network. The lines are displayed in various color that
represent the protocol being used. Individual nodes and their connecting
links grow and shrink in size with increases and decreases in network
traffic coming from that node.
Etherape was originally developed in February of 2000 by Juan
Toledo. Etherape 0.9.12, authored by Riccardo Ghetta, is the latest version
and was released on May 31, 2011. Etherape is one of the many tools that
ships with Backtrack 5.
Installation
Since Etherape comes pre-loaded in my installation of Backtrack 5
R3, there was no installation required above and beyond the installation of
Backtrack itself. It is one of the few programs that come with Backtrack 5
that runs right out of the box. There are no command-line commands to
use and no switches to learn. It is literally point, click, and run.
Use of Etherape
Etherape bills itself as a network monitor and that is exactly what it
is, no more and no less. There are several features that are listed on the
Etherape website, some of which did not work. The following are those
features and my experience getting them to work.
The first listed feature is Network traffic is displayed graphically.
The more talkative a nose is, the bigger its representation. The application
certainly displays network traffic graphically but I did not have success
with the busier nodes being represented larger. When the traffic was being
transmitted, the colored lines got bigger and smaller as they should. The
numerical representation of the node did not change size as it was
supposed to. Being able to tell which node on the network was responsible
for the majority of the traffic simply by finding the largest font would have
been a great option, it was disappointing that it did not work.
The next feature listed is Node and link color shows the most used
protocol. Again part worked and part did not. The links changed colors
with the varying protocols but the node stayed yellow as you can see in the
picture.
User may select what level of the protocol stack to concentrate on is
the next feature on the list. The parts of this feature that I was able to test
worked like a charm. As you can see in the picture, you can choose between
token ring, fiber, ethernet, IP, or TCP. I was not able to test token ring or
fiber but the other three options were very useful.
The next feature was extremely interesting and useful. Data can be
captured off the wire from a live network connection, or read from a
tcpdump file. I did not try a tcpdump file but I did capture data from the
wire. The thing that was very interesting was that the computer did not
need to be on the network in order to see the traffic. I plugged the ethernet
wire from my office computer in to my laptop and immediately began to
see activity. My office network does not use DHCP and the computer did
not have a valid IP address but it was still able to follow the traffic. This
option has multiple implications for hackers but not many for security with
the exception of penetration testing. This option did not work for wireless
networks, you must be connected to the router and have an IP address on
the network to see the traffic.
There are a slew of packet and frame types that Etherape claims to
support. The networks that I did my testing with did not have some of
those packets traversing its line. I did however see over twenty different
types of packets when I left Etherape running over night.
Name resolution using DNS and host files. This feature worked well
and is useful. During traffic monitoring you could see the node's IP address
with intermittent flashes of its NETBios name. It is useful as nodes pop up
on the screen to be able to easily identify them. As long as the network you
are on employs a common-sense naming scheme, this feature makes
visualizing the network much easier.
The next feature is Clicking on a node/link opens a detail window
showing protocol breakdown and other traffic statistics. This option
worked well. I think, using this feature, it would simplify identification of a
node that has increased traffic under a certain protocol. For example,
increased or constant HTTP traffic can indicate a virus or malware which
would be easy to spot using this feature of Etherape.
Similar to the previous feature, Etherape also offers a Protocol summary
dialog that shows global traffic statistics by protocol. I am not sure how
this would be useful for security. Knowing what protocols are using most of
your bandwidth would be useful in optimizing your network.
Conclusion
Etherape is a nice tool. In my opinion, the graphical representation of
network traffic that it provides is more cool looking than useful. I did use
Etherape to decide on which node to perform an ARP poisoning on an open
wireless network. I simply picked the node with the most HTTP traffic and
that worked well.
The graphical user interface (GUI) is very easy to use. Most of the
options are readily apparent. The only reason I even tried to find
documentation was because I thought I may be missing some options.
Unfortunately I did not miss anything, Etherape is just not loaded with
options.
Even if you are just looking for graphical representation of your
network I think there are better options than Etherape. I saw many
suggestions to use Zenmap in lieu of Etherape for network analyzation.
Having only used Etherape, I cannot make such a suggestion but it seems
reasonable.
Backtrack 5
Overview
Backtrack is a GNU/Linux distribution that is used for digital
forensics and penetration testing. Its name is derived from the term
backtracking which is defined by Wikipedia as, a general algorithm for
finding all solutions to some computational problem. Backtrack is based in
an Ubuntu desktop. It is available for both 32 and 64-bit architectures and
is a free, open-source download. Backtrack can be installed as the primary
operating system on a computer, can be run as a live CD/DVD/USB, can be
installed in a virtual machine, or can be dual-booted on a system.
Backtrack contains more applications than can reasonably be
discussed in a 10-page paper. The Backtrack folder alone contains
subfolders for Information Gathering, Vulnerability Assessment,
Exploitation Tools, Privilege Escalation, Maintaining Access, Reverse
Engineering, RFID Tools, Stress Testing, Forensics, Reporting Tools,
Services and Miscellaneous. Each of these subfolders have subfolders and
some of those have even more subfolders. There are over 300 applications
in the Backtrack Suite.
INSTALLATION
As I mentioned above, there are several ways to employ Backtrack. I
will discuss two of the five methods of installation. Backtrack is loaded
with choices and the choices begin with the download.
When you navigate to backtrack-linux.org/downloads, the first thing you
must decide is the version of the distro you would like to download. The
most current version is Backtrack 5 R3 but you can also get the original
Backtrack 5 along with R1 and R2. You must also decide whether you use
Gnome or KDE. Both of those are available in 32 and 64-bit architectures.
Gnome and KDE versions may both be had in an ISO and Gnome can be
downloaded in a VMWare optimized version. You can also choose whether
to download your chosen distro directly from the website or via a torrent.
The direct download took about 2 hours for Backtrack 5 R3 and the torrent
took less than half that time. I am using an Intel Atom netbook to install
Backtrack on so I chose to download the 32-bit KDE ISO version of R3 and
the 32-bit KDE ISO version of R2. I only downloaded R2 because I could
not get R3 to install on my system, which I will discuss later.
To install the ISO on a DVD, I used Active ISO Burner. Active ISO
Burner is a free application that burns the files on a DVD and makes it
bootable. All in one step, you are basically ready to begin.
To install the ISO on a USB drive, I used YUMI installer. YUMI
installer can be downloaded for free from pendrivelinux.com. It is a great
tool that can be used to make bootable USB drives from a vast variety of
Linux distros. You can even choose to let YUMI go out to the Internet and
download the distro for you. I have used YUMI installer in the past for
Ubuntu and Fedora distros as well as for Ultimate Boot CD and it has
worked with no problems at all, until now.
My USB version of Backtrack R3 would only boot once. After the
initial boot, the subsequent boots hang-up on the loading screen. I also
tried to make a bootable USB with Backtrack R2 which was successful.
With a Backtrack 5 Live CD already in hand, it was fairly easy to
install Backtrack on a computer. After the Live CD loads, there is an install
icon on the desktop. Running that installer allows you to re-partition your
hard disk or to completely overwrite the hard drive and install Backtrack as
the mail OS. I tried to install Backtrack 5 R3 in this manner for several
days with no luck. I then made a Backtrack 5 R2 Live CD and tried to
install that way. This installation worked fine, as long as I didn't run the
updates.
The nature of the applications on Backtrack better lend themselves to
running via Live CD or USB, but having it on a system does have its merits.
If hacking was your goal, having the distro installed on a laptop or netbook
would allow you to connect to a public wifi hotspot and sniff the traffic. It
was useful for me because I could install programs and save files,
something that is more difficult running from a Live CD. My Windows
laptop does not allow for booting to USB drives, so in the end having a
machine dedicated to Backtrack, even an older version, was beneficial.
Running Backtrack 5
Getting Backtrack to actually boot on a system is not as easy as
placing the Live CD in the tray and turning on the system. When you do, in
fact, turn on the system and the Live CD loads, there are a few seconds in
which it appears that nothing is happening. Just when I was about to
restart, it became apparent that the system was still booting.
There are several screens that splash and then go away. This
continues for about two minutes before you receive an error message that
looks like this:
If you did not know better, you might think that your boot failed. To
continue the boot with this error you must type in the command, startx.
This continues the boot and loads the GUI.
During the boot of the system that has Backtrack installed many of
the same things occur, with a few exceptions. The boot process stops much
sooner than in the previous example and asks you to authenticate.
Again, if you do not know any better you may think this is the end of your
time with Backtrack. After some googleing, I found out that the root
password for Backtrack distros is toor. Once you authenticate as root, you
are left in a similar position as you were with the Live CD, except this time
with some guidance.
Backtrack lets you know what the root password is, fact that you probably
know if got to this point. It also tells you how to load the GUI, which the
Live CD version leaves out.
Applications
As I previously mentioned, Backtrack 5 comes with well over 300
applications. In searching for other tools to write about, I used many of
them. Some of the more obvious tools are applications that you would need
on any computer. Backtrack 5 comes ships with Firefox along with a web
browser called Konqueror with which I am unfamiliar. I also used Ettercap
and Etherape, often in conjunction with each other. I discuss these tools
extensively in other sections of the paper.
Conclusion
Backtrack 5 is most certainly a powerful suite of tools. It provides an
extensive list of applications to perform all sorts of penetration testing and
forensic activities on the host system.
In my opinion, Backtrack is not a tool for the uninitiated. The
installation is not as straight forward as most Windows users are used to.
There are a few programs that run in a GUI which can be used by those
that know precious little about operating in Linux. Most of the programs
must be run from the command line and many of those require several
switches to make them function properly. That said, there is a load of
documentation, including a ton of YouTube videos, which spell out how to
do certain things in the environment.
Performing these tasks with little knowledge, following YouTube
videos can be a dangerous proposition. For example, while performing Arp
poisoning in Ettercap, just closing the window in which the application is
running does not reset the network you are on. Those with malicious
intentions may not care, but if you testing this on your home system, or
worse yet your work system, you can leave the network in shambles.
All things considered, with some prior Linux knowledge and a little
reading, Backtrack 5 is a tool that can be leveraged to perform may tasks.
On the surface, a few of the tools seem redundant but when you dig further
you find that, while there is some crossover, each tools is very good at
doing at least one thing. It is just matter of trial and error, hopefully on
some virtualized machines!
MICROSOFT BASELINE SECURITY ANALYZER
Overview
Microsoft Baseline Security Analyer (MBSA) is a IT security tool that
scans the state of your computer and compares it to Microsoft's security
recommendations. It scans for available updates to the operating system,
Microsoft Data Access Components, MSXML, .NET Framework and SQL
Server. It scans for components of Windows such as Internet Information
Services (IIS) and COM+. MBSA uses Microsoft Update as a data source
which is obtained directly from the Microsoft Update Website. According
to a paper published by Florida Aricultural and Mechanical Univerusty,
MBSA averages three million computers scanned wach week.
MBSA is a robust tool especially when price is taken in to
consideration. Other popular scanners can cost from several hundred
dollars per year to several thousands dollars per month. For companies
running completely, or even partially, in a Microsoft environment the ROI
of MBSA is hard, if not impossible to beat.
MBSA is used to scan for missing patched and weak or missing
passwords. It is built to asses security settings on Microsoft products such
as Internet Explorer, Web Server, Microsoft SQL server, MS Office in
operating systems such as Windows Server 2000, 2003, 2008, XP, Vista
and 7. Microsoft reports that MBSA is not yet availavle for Windows Server
2012 or Windows 8.
Installation
Microsoft Basline Security Analyer, when compared to the other
tools I used for this project, was head and shoulders, by far, two-thousand
percent easier to install than the others. It was easy to locate and a simple
and fast download.
After the quick download, the installation was also very easy. A few of
the normal Windows questions and I was on my way. Similar to Nessus
but quite dissimilar to Backtrack, there were no command-line commands
to be entered and no switches to be learned. It was as easy as install,
double-click, scan.

Scanning
Performing scans with MBSA was also very easy. Initially, users are
presented with the choice to perform a scan of a single computer or
multiple computers.
The options on the following screens for both single scan and
multiple scan are extremely similar. The only real difference is the single
scan screen has a space for one IP address while a range of IP addresses
can be entered in the multiple scan screen.
The other options include:
? Check for Windows administrative vulnerabilities
? Check for weak passwords
? Check for Internet Information Services (IIS) administrative
vulnerabilities
? Check for SQL administrative vulnerabilities
? Check for security updates
o Configure computers for Microsoft Update and scanning
prerequisites
o Advanced Update Services options
In my first attempt, I tried to scan all the computers on my home network. I
gave the scan the range of 192.168.1.1 to 192.168.1.110. I thought that this would
be interesting because, at that particular time, there were a variety of devices
connected to the network. There were 2 Windows machines, one running XP
Professional service pack 3 and the other running 7 Home Premium service pack
1. There was a Linux Backtrack R3 machine, an Apple Macbook Pro, an HP
Touchpad, an Apple IPhone 4, a Blackberry Curve, and a Huawei phone running
an Android OS. I was interested to see how the scanner dealt with non-Windows
devices and well as different Microsoft OSes. As you can see from the results
below, it did not go well. MBSA only scanned the system on which it was
installed. The other Windows machine, on 192.168.1.101 gave a logon failure and
the rest said, Could not resolve the computer name.
The results are returned by MBSA are at the very least impressive.
They are logically organized for ease of reading. My favorite thing about
the results are the links to documents that explain what was scanned and
what, if anything, can be done to improve the situation.
I purposely did not restart my computer to complete the installation
of the latest updates. I wanted to see if MBSA would find the lack of
updating and it did.
When the What was scanned link is clicked under Incomplete Updates,
the following is window is displayed. Its diagnosis is 100% spot on. I have
installed the updates but did not restart.
The previous window alludes to it, but the How to correct this link goes
in to much more detail. Of course this problem has the simple fix of
restarting the system. I be would interested to see computers with more
problems and the suggested fixes for those.
To check the accuracy of MBSA, I restarted my system and did
another scan. The new scan showed that the problem with updates had
been
fixed.
Conclusion
Microsoft Baseline Security Analyzer is a good tool. It hold its own in
a market with much more expensive applications. It is very user friendly,
with a simple UI and easy to read results. I do no see a reason to use other,
more expensive options while working in a Windows environment.
It makes sense that Microsoft it able to produce such a great tool.
First, they are Microsoft and they have a nearly unlimited budget. Second,
and more importantly in my opinion, they created the software that they
are searching for vulnurabilities. Just as Frank Domizio is the foremost
authority on the things that are wrong with Frank Domizio, so should
Microsoft have expert level knowledge in the things that are wrong with
Windows. Other tools are being made by third-party software developers
who must exploit an operating system before building a scanner, an issue
that is not faced by Microsoft.
Being a Windows-bound Microsoft product could also be considered
a limitation. Of course the tool can only be installed and run on Windows
machines. I attempted to install it on my Linux Backtrack machine using
Wine but could not get that to work.
For ease of use, it would be great to be able to keep all security tools
in one place. Since it seems some of the most popular and useful security
tools are written to be used in a Unix/Linux environment, it would be
extremely useful to be able to use MBSA in Linux. I imagine that if I were a
serious security practitioner, I would virtualize a Windows machine on my
Linux computer to have access to MBSA and other tools that may not be
available.
Even with this and other minor limitations, MBSA is a great tool. It
should be in the arsenal of every IT security person if not every IT person
period. It will certainly be something that I use in the future.
SUMMATION
I admit, when I first began to think about this project I felt
intimidated. As it turned out, I enjoyed testing the tools. I learned a lot
about how computers are hacked, a topic that I previously knew nothing
about. I admit that it was frustrating at times, especially when trying to
install Backtrack 5 on my netbook, but I gained some useful knowledge.
Of the five tools that I tested, I found three of them to be easy to use
and helpful. Nessus, MBSA and Backtrack 5 are all robust tools. They each
have more options than I have time to test. Their usefulness is obvious
even to a neophyte such as myself. I enjoyed working with them and found
there to be extensive documentation.
Even though a career in IT security is probably not in my future, I
hope to get to know these tools more intimately. I can see how they would
be useful even for anyone in IT even though they may not be in computer
security.

Computing and Technology Courses

GPA 3.97

Summa Cum Laude

Click here for course descriptions

Microcomputer Hardware                           A	

Microcomputer Operating System                   A+	

Server I                                         A	

Server II                                        A

Operating System Architecture I                  A+

Operating System Architecture II                 B+

Operating System Architecture III                A

Network Administration I                         A	

Network Administration II                        A+	

Network Administration III                       A+	

Network Security (Cisco)                         A

Object Oriented Client Side Programming (Java)   A+

Linux I                                          A-

Linux II                                         A+

Oracle SQL Database I                            A+	

Oracle SQL Database II                           A+

Oracle SQL Database III (PL/SQL)                 A+

IT Security I                                    A

IT Security II                                   A+

Web Develpoment I (HTML/CSS)                     A	

Web Development II (JavaScript)                  A+

Web Development III (Flash)                      A+

Web Development IV (PHP)                         A+

Security and Information Warfare                 A

Data Mining for Security                         A+

Senior Project I                                 A+

Senior Project II                                A+

Information Security Risk Assessesment           A+

Object-Oriented Systems Analysis (UML)           A

Applied Cryptography                             A+

Computer Forensics                               A+

Project Management                               A

Drexel University

Villanova University

College of Computing and Infomatics

College of Engineering

Bachelor of Science Degree in Computing and Security Technology

Master of Science Degree in Cybersecurity Engineering

Major Coursework in:

Web Developement

Flash Sample

Click here to open my former flash landing page in a new window.

HTML/CSS/JavaScript Code Sample

Say Cheese Philly Project

Database Adminstration

Oracle SQL Code Sample

Doctor's Office Project Select Statements

Information Security

IT Security Research Project

Computing and Technology Courses

GPA 3.97

Summa Cum Laude

Click here for course descriptions