inverse mapping

1) In computer graphics programming, inverse mapping (also known as backward mapping) is a technique used with texture mapping.

2) In a computer network, inverse mapping is a stealth-approach network scanning method that gathers information about inactive IP addresses on a network to try to determine which IP addresses are associated with active hosts.

According to the Systems Administration and Network Security (SANS) Institute, typical firewall procedures can help the attacker to gain the information they seek. Typically, firewalls and routers do not respond to a ping response packet if the target address exists on the network, but respond with an ICMP (Internet Control Message Protocol) host unreachable signal if the target is not available. The absence of response allows the attacker to guess which IP addresses of a given address block map to live hosts.

Inverse mapping may be a widely-used attack technique. In November 1999, the SANS Institute noticed evidence in their router and firewall logs that they were receiving responses to ping requests in cases where no network machine had sent the request. When SANS made that information available to its membership, many members reported similar network activity.

Read more about inverse mapping: - SearchSecurity.com provides a collection of Best Web Links for Common Vulnerabilites and Prevention Tips. - Sys-Security.com maintains a helpful document called "Network Scanning Techniques: Understanding how it is done."

Do you have something to add to this definition? Let us know. Send your comments to techterms@whatis.com

BROWSE BY TAG Network Intrusion Detection and Analysis,   Enterprise Network Security,   Monitoring Network Traffic and Network Forensics,   VIEW ALL TAGS

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT Chained Exploits: How to prevent phishing attacks from corporate spies Ever wonder if someone is monitoring everywhere you go on the Internet? In this chapter excerpt, learn how to keep corporate spies at bay. PCI compliance requirement 10: Auditing Diana Kelley and Ed Moyle of Security Curve review PCI compliance requirement 10: "Track and monitor all access to network resources and cardholder... Know when you need IDS, IPS or both Cut through the hype and learn the differences and benefits of intrusion detection and prevention systems.

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary computer forensics  (SearchSecurity.com) Einstein  (SearchSecurity.com) Einstein is the network monitoring tool used by the United States federal government's Department of Homeland Security (DHS). Einstein is used to...