\select@language {french} \contentsline {chapter}{\numberline {1}Introduction}{4} \contentsline {chapter}{\numberline {2}Firewall-Services, l'entreprise}{5} \contentsline {section}{\numberline {2.1}Raison sociale, statut juridique et actionnariat}{5} \contentsline {section}{\numberline {2.2}Activit\'e}{5} \contentsline {section}{\numberline {2.3}Concurrence}{5} \contentsline {section}{\numberline {2.4}Ressources humaines et organisation}{5} \contentsline {section}{\numberline {2.5}Recherche et d\'eveloppement}{5} \contentsline {section}{\numberline {2.6}Politique de sous-traitance et d'achat}{6} \contentsline {chapter}{\numberline {3}Objectif de la mission technique}{7} \contentsline {section}{\numberline {3.1}Le cahier des charges}{7} \contentsline {subsection}{\numberline {3.1.1}Contexte de l'\'etude}{7} \contentsline {subsection}{\numberline {3.1.2}Structuration}{7} \contentsline {subsection}{\numberline {3.1.3}R\'ecup\'eration des informations}{8} \contentsline {subsection}{\numberline {3.1.4}G\'en\'eration du rapport}{9} \contentsline {subsection}{\numberline {3.1.5}Livrables}{10} \contentsline {section}{\numberline {3.2}Les \'evolutions du cahier des charges}{10} \contentsline {section}{\numberline {3.3}Crit\`ere de validation du sujet}{11} \contentsline {section}{\numberline {3.4}Moyens mis \`a disposition du stagiaire}{11} \contentsline {section}{\numberline {3.5}Planification du projet}{11} \contentsline {chapter}{\numberline {4}R\'ealisation du projet}{12} \contentsline {section}{\numberline {4.1}Analyse du cahier des charges}{12} \contentsline {section}{\numberline {4.2}Conception g\'en\'erale}{12} \contentsline {subsection}{\numberline {4.2.1}R\'ecup\'eration d'informations}{12} \contentsline {subsection}{\numberline {4.2.2}G\'en\'eration du rapport}{13} \contentsline {subsection}{\numberline {4.2.3}Configuration \& Int\'egration}{13} \contentsline {section}{\numberline {4.3}Conception d\'etaill\'ee}{13} \contentsline {subsection}{\numberline {4.3.1}R\'ecup\'eration d'informations}{13} \contentsline {subsubsection}{\numberline {}script\_interne.py}{13} \contentsline {paragraph}{D\'etection de l'interface r\'eseau}{13} \contentsline {paragraph}{D\'etection des machines pr\'esentes sur le r\'eseau}{13} \contentsline {paragraph}{Le scan}{14} \contentsline {paragraph}{SMB}{14} \contentsline {paragraph}{transport}{14} \contentsline {subsubsection}{\numberline {}script\_externe.py}{15} \contentsline {subsubsection}{\numberline {}scripts clients}{15} \contentsline {paragraph}{Structure}{15} \contentsline {paragraph}{Parse}{15} \contentsline {paragraph}{Les diff\'erentes commandes}{15} \contentsline {paragraph}{Les accesseurs}{17} \contentsline {subsubsection}{\numberline {}sniff\_begin.sh \& sniff\_end.sh}{17} \contentsline {subsection}{\numberline {4.3.2}G\'en\'eration du rapport}{17} \contentsline {subsubsection}{\numberline {}Int\'egration}{17} \contentsline {paragraph}{La structure info}{17} \contentsline {paragraph}{group\_topology}{18} \contentsline {subsubsection}{\numberline {}Outils de r\'edaction du rapport}{18} \contentsline {subsubsection}{\numberline {}Le rapport}{19} \contentsline {paragraph}{Topologie}{19} \contentsline {paragraph}{Service accessible en interne}{19} \contentsline {paragraph}{Partage r\'eseau}{19} \contentsline {paragraph}{Test anti intrusion}{19} \contentsline {paragraph}{Trafic r\'eseau}{19} \contentsline {paragraph}{Configurations mat\'erielles}{20} \contentsline {paragraph}{Configurations logicielles}{20} \contentsline {paragraph}{Protection des donn\'ees}{20} \contentsline {paragraph}{Annexe Nessus}{20} \contentsline {subsection}{\numberline {4.3.3}Configuration \& Int\'egration}{20} \contentsline {subsubsection}{\numberline {}Configuration}{20} \contentsline {subsubsection}{\numberline {}Int\'egration}{21} \contentsline {paragraph}{Petits scripts utiles}{21} \contentsline {paragraph}{install.sh}{21} \contentsline {paragraph}{Knoppix}{21} \contentsline {section}{\numberline {4.4}R\'esultats}{21} \contentsline {subsection}{\numberline {4.4.1}Non conformit\'e au cahier des charges}{21} \contentsline {subsection}{\numberline {4.4.2}Bogues connus}{22} \contentsline {subsection}{\numberline {4.4.3}Am\'eliorations possibles}{22} \contentsline {chapter}{\numberline {5}Conclusion}{24} \contentsline {chapter}{\numberline {6}Glossaire}{25} \contentsline {chapter}{\numberline {A}Bibliographie}{27} \contentsline {chapter}{\numberline {B}Les documents commerciaux}{28} \contentsline {chapter}{\numberline {C}Copie d'\'ecran d'un exemple de rapport}{31} \contentsline {section}{\numberline {C.1}D\'ebut}{31} \contentsline {section}{\numberline {C.2}Structure du r\'eseau}{35} \contentsline {section}{\numberline {C.3}Service accessible en interne}{36} \contentsline {section}{\numberline {C.4}Partage r\'eseau}{41} \contentsline {section}{\numberline {C.5}Test anti-intrusion}{43} \contentsline {section}{\numberline {C.6}Trafic r\'eseau}{45} \contentsline {section}{\numberline {C.7}Configurations mat\'erielles}{48} \contentsline {section}{\numberline {C.8}Configurations logicielles}{49} \contentsline {section}{\numberline {C.9}Protection des donn\'ees}{51} \contentsline {section}{\numberline {C.10}Annexe Nessus}{52} \contentsline {chapter}{\numberline {D}Documentation utilisateur}{54} \contentsline {section}{\numberline {D.1}Introduction}{55} \contentsline {section}{\numberline {D.2}Le fichier de configuration}{55} \contentsline {section}{\numberline {D.3}Script interne}{56} \contentsline {section}{\numberline {D.4}Script client}{56} \contentsline {subsection}{\numberline {D.4.1}Syst\`eme Windows}{56} \contentsline {subsection}{\numberline {D.4.2}Syst\`eme Unix}{56} \contentsline {section}{\numberline {D.5}Script sniff}{57} \contentsline {section}{\numberline {D.6}Script externe}{57} \contentsline {section}{\numberline {D.7}Audit}{57} \contentsline {chapter}{\numberline {E}Documentation d\'eveloppeur}{58} \contentsline {section}{\numberline {E.1}Introduction}{59} \contentsline {section}{\numberline {E.2}Structure global du projet}{59} \contentsline {subsection}{\numberline {E.2.1}L'arborescence}{59} \contentsline {subsubsection}{\numberline {}Fichier}{59} \contentsline {subsubsection}{\numberline {}R\'epertoire}{59} \contentsline {section}{\numberline {E.3}Structure de donn\'ees}{60} \contentsline {subsection}{\numberline {E.3.1}info}{60} \contentsline {subsection}{\numberline {E.3.2}c\_scr}{61} \contentsline {section}{\numberline {E.4}Les communications}{61} \contentsline {subsection}{\numberline {E.4.1}script\_interne.py $\to $ audit.py}{61} \contentsline {subsection}{\numberline {E.4.2}script\_extern.py $\to $ audit.py}{61} \contentsline {subsection}{\numberline {E.4.3}script client $\to $ audit.py}{61} \contentsline {subsection}{\numberline {E.4.4}sniff\_end $\to $ audit.py}{61} \contentsline {section}{\numberline {E.5}Les mises \`a jours}{62} \contentsline {subsection}{\numberline {E.5.1}Nessus}{62} \contentsline {subsection}{\numberline {E.5.2}Le r\'epertoire data}{62} \contentsline {subsubsection}{\numberline {}prog.py}{62} \contentsline {subsubsection}{\numberline {}hotfix.py}{62} \contentsline {subsubsection}{\numberline {}spyware.py}{62} \contentsline {section}{\numberline {E.6}D\'ependance logiciel}{62} \contentsline {subsection}{\numberline {E.6.1}client script}{62} \contentsline {subsection}{\numberline {E.6.2}liveCD}{63} \contentsline {section}{\numberline {E.7}Installation}{63} \contentsline {subsection}{\numberline {E.7.1}Le script d'install}{63} \contentsline {subsection}{\numberline {E.7.2}G\'en\'eration du live CD}{64} \contentsline {subsubsection}{\numberline {}Pr\'e-requis}{64} \contentsline {subsubsection}{\numberline {}Howto}{64} \contentsline {subsection}{\numberline {E.7.3}Mise \`a jour}{65} \contentsline {section}{\numberline {E.8}TODO}{65} \contentsline {subsection}{\numberline {E.8.1}La partie trafic r\'eseau}{65} \contentsline {subsection}{\numberline {E.8.2}Script Unix}{65} \contentsline {subsection}{\numberline {E.8.3}Script Windows}{66} \contentsline {subsection}{\numberline {E.8.4}Script update}{66} \contentsline {subsection}{\numberline {E.8.5}La partie 9}{66} \contentsline {subsection}{\numberline {E.8.6}Export}{66} \contentsline {chapter}{\numberline {F}L'API}{67} \contentsline {section}{\numberline {F.1}Module config}{68} \contentsline {subsection}{\numberline {F.1.1}Variables}{68} \contentsline {section}{\numberline {F.2}Module fs\_stat}{69} \contentsline {subsection}{\numberline {F.2.1}Class pc\_fs\_stat}{69} \contentsline {subsubsection}{\numberline {}Methods}{69} \contentsline {section}{\numberline {F.3}Module hotfix}{70} \contentsline {subsection}{\numberline {F.3.1}Variables}{70} \contentsline {section}{\numberline {F.4}Module netraf}{71} \contentsline {subsection}{\numberline {F.4.1}Functions}{71} \contentsline {section}{\numberline {F.5}Module network}{72} \contentsline {subsection}{\numberline {F.5.1}Functions}{72} \contentsline {section}{\numberline {F.6}Module pc\_parse}{73} \contentsline {subsection}{\numberline {F.6.1}Functions}{73} \contentsline {subsection}{\numberline {F.6.2}Class parse}{75} \contentsline {subsubsection}{\numberline {}Methods}{75} \contentsline {section}{\numberline {F.7}Module prog}{77} \contentsline {subsection}{\numberline {F.7.1}Variables}{77} \contentsline {section}{\numberline {F.8}Module sniff\_parse}{78} \contentsline {subsection}{\numberline {F.8.1}Functions}{78} \contentsline {section}{\numberline {F.9}Module spyware}{79} \contentsline {subsection}{\numberline {F.9.1}Variables}{79}