All right now we've seen some pretty scary stuff in this section and this lecture.
I want to talk about how to prevent some of these attacks or securing our networks from them.
So the first thing that we spoke about was captive portals and we see how we can gain access to these
networks using three methods.
And even if the first two methods didn't work then the third would rely on the users and will gain access
as shown that proves that a captive portals are not secure at all.
So in order to get the functionality of a captive portal but stay secure the best thing to do is to
use WPA enterprise with a radius server and then give each user an individual username and password.
This way you can still prevent some people from connecting.
You can still disable some of the passwords.
Who can control these users and see each what each one of them is doing.
But at the same time the people authenticate using the WPA or WPA to authentication procedure.
So it's much more secure.
The data is going to be sent encrypted so people that are not connected to the network cannot sniff
it.
They can't just connect and do IRP spoofing.
And at the same time you're getting the same functionality that you'll get from a captive portal.
Next we've seen how easy it is to crack WEP with S-K with shared key authentication so it goes without
saying don't use web.
Regardless of how you implement it even if you think that you implemented it in a more secure manner
just don't use work period.
Next is WPX and we see how we can force some routers to have their password or their pen.
Again there are secure ways of implementing them.
P.s. if you disable push button authentication and lock after a number of failed attempts but again
if you want to be secure just disable WPX.
That'll just make griever not work at all.
Then we see more advanced worthless attacks.
So if WEP is not used WPA as is enabled.
We're talking about you using the BPA or WPA too.
And the only way to gain access to your network is use in word that I can receive advice to all these
attacks where we can use big words lists and save and restore our programs and use the GPL for cracking
to make it faster.
No all of these are still worthless attacks.
So if you use a long password say minimum of 16 characters with letters numbers and symbols then it's
going to be very very difficult to get your password even using the methods that I showed you right
now.
Obviously the longer the password the harder it is to get the key for it because it's a word this attack.
So the key has to be there in the wordlist that the hacker is using.
Now the last method that we've seen and we said that this is the last resort is used in an evil to an
attack.
And we see how we can use that to gain access to WPA or WPA to networks and we also see how to use that
to gain access to captive portals.
Now in both of these methods we're relying on the humans on the users that use the network.
So when it goes down to that then there is nothing you can do in terms of the software or the hardware.
The hacker is literally exploiting the people that use the network.
So the only thing you can do in this case is educate your users.
So if you have a small group of users you can just have a talk and tell them here look this is an attack
that can be used.
Be careful from it if you get the authenticated or disconnected from your network.
Make sure when you connect that you connect to the same network and make sure that the network you're
connecting to is actually using encryption.
So it's not an open network.
Also tell them never enter the network key in a web interface because as we seen when we're running
the evil twin attack we always ask for the password and a web interface.
So make sure that your users know.
They should never answer the key and a web interface.
And if they already enter the key they'll never be asked for it again unless they clicked on Forgot
the network which they should know.
So to summarize if you want to secure your network from the Ganey got attacks that we've seen so far.
First don't use captive photos implementable Dhupia enterprise if you want a similar functionality to
never use WEP three disable W.P. as for use WPA or WPA too with a complex password of letters characters
numbers and symbols.
5.
Educate your users to make sure they to be victims of a social engineering attack.