Information Technology Reference
In-Depth Information
Ping Sweep:
Try Pinging Different IP addresses found by you during Footprinting:- Try
Pinging Different IP addresses found by you so that you may figure out that which IP is
alive in-order to scan for open ports later.
Performing TCP Scans:
Scan ports on machines to see which services are offered by sys-
tem. TCP scans can be performed by scanning a single port on a range of IPs (Many IPs
But checking one port on them), or by scanning a range of ports on a single IP (Many Ports
but on a sinle IP). Both techniques will produce helpful information for hacker and you.
Performing UDP Scans:
Send garbage UDP packets to a desired port. Well normally don't
perform UDP scans a whole lot because most machines show and reply with an ICMP 'port
unreachable' message. Meaning that no service is available, most of the advanced machines
and servers show this behavior.
GATHERINING INFORMATION TECHNIQUES
1: One-on-one interviews
The most common technique for gathering requirements is to
sit down with the clients and ask them what they need. The discussion should be planned
out ahead of time based on the type of requirements you're looking for. There are many
good ways to plan the interview, but generally you want to ask open-ended questions to get
the interviewee to start talking and then ask probing questions to uncover requirements.
2: Group interviews
Group interviews are similar to the one-on-one interview, except that
more than one person is being interviewed -- usually two to four. These interviews work
well when everyone is at the same level or has the same role. Group interviews require
more preparation and more formality to get the information you want from all the parti-
cipants. You can uncover a richer set of requirements in a shorter. Period of time if you can
keep the group focused.
3: Facilitated sessions
In a facilitated session, you bring a larger group (five or more) to-
gether for a common purpose. In this case, you are trying to gather a set of common re-
quirements from the group in a faster manner than if you were to interview each of them
separately.
4: Joint application development (JAD) - JAD sessions are similar to general facilitated
sessions. However, the group typically stays in the session until the session objectives are
completed. For a requirements JAD session, the participants stay in session until a com-
plete set of requirements is documented and agreed to.
5: Questionnaires
Questionnaires are much more informal, and they are good tools to
gather requirements from stakeholders in remote locations or those who will have only
