Would you like to inspect the original subtitles? These are the user uploaded subtitles that are being translated: 1 00:00:00,630 --> 00:00:05,490 All right now we've seen some pretty scary stuff in this section and this lecture. 2 00:00:05,490 --> 00:00:11,400 I want to talk about how to prevent some of these attacks or securing our networks from them. 3 00:00:11,970 --> 00:00:17,580 So the first thing that we spoke about was captive portals and we see how we can gain access to these 4 00:00:17,580 --> 00:00:20,430 networks using three methods. 5 00:00:20,430 --> 00:00:26,450 And even if the first two methods didn't work then the third would rely on the users and will gain access 6 00:00:27,820 --> 00:00:33,040 as shown that proves that a captive portals are not secure at all. 7 00:00:33,040 --> 00:00:39,550 So in order to get the functionality of a captive portal but stay secure the best thing to do is to 8 00:00:39,550 --> 00:00:48,050 use WPA enterprise with a radius server and then give each user an individual username and password. 9 00:00:48,130 --> 00:00:51,340 This way you can still prevent some people from connecting. 10 00:00:51,340 --> 00:00:53,740 You can still disable some of the passwords. 11 00:00:54,480 --> 00:00:58,590 Who can control these users and see each what each one of them is doing. 12 00:00:58,830 --> 00:01:06,330 But at the same time the people authenticate using the WPA or WPA to authentication procedure. 13 00:01:06,360 --> 00:01:08,600 So it's much more secure. 14 00:01:08,670 --> 00:01:13,890 The data is going to be sent encrypted so people that are not connected to the network cannot sniff 15 00:01:13,890 --> 00:01:14,330 it. 16 00:01:14,370 --> 00:01:17,200 They can't just connect and do IRP spoofing. 17 00:01:17,380 --> 00:01:23,200 And at the same time you're getting the same functionality that you'll get from a captive portal. 18 00:01:23,400 --> 00:01:30,000 Next we've seen how easy it is to crack WEP with S-K with shared key authentication so it goes without 19 00:01:30,000 --> 00:01:31,340 saying don't use web. 20 00:01:31,440 --> 00:01:36,690 Regardless of how you implement it even if you think that you implemented it in a more secure manner 21 00:01:36,870 --> 00:01:39,870 just don't use work period. 22 00:01:39,870 --> 00:01:47,910 Next is WPX and we see how we can force some routers to have their password or their pen. 23 00:01:48,330 --> 00:01:51,240 Again there are secure ways of implementing them. 24 00:01:51,240 --> 00:01:57,360 P.s. if you disable push button authentication and lock after a number of failed attempts but again 25 00:01:57,450 --> 00:02:00,250 if you want to be secure just disable WPX. 26 00:02:00,330 --> 00:02:02,560 That'll just make griever not work at all. 27 00:02:03,680 --> 00:02:06,940 Then we see more advanced worthless attacks. 28 00:02:06,950 --> 00:02:09,860 So if WEP is not used WPA as is enabled. 29 00:02:09,920 --> 00:02:13,460 We're talking about you using the BPA or WPA too. 30 00:02:13,630 --> 00:02:20,270 And the only way to gain access to your network is use in word that I can receive advice to all these 31 00:02:20,360 --> 00:02:27,680 attacks where we can use big words lists and save and restore our programs and use the GPL for cracking 32 00:02:27,680 --> 00:02:29,200 to make it faster. 33 00:02:29,210 --> 00:02:32,730 No all of these are still worthless attacks. 34 00:02:32,810 --> 00:02:40,370 So if you use a long password say minimum of 16 characters with letters numbers and symbols then it's 35 00:02:40,370 --> 00:02:45,560 going to be very very difficult to get your password even using the methods that I showed you right 36 00:02:45,560 --> 00:02:46,050 now. 37 00:02:46,220 --> 00:02:52,600 Obviously the longer the password the harder it is to get the key for it because it's a word this attack. 38 00:02:52,610 --> 00:02:58,500 So the key has to be there in the wordlist that the hacker is using. 39 00:02:58,550 --> 00:03:04,970 Now the last method that we've seen and we said that this is the last resort is used in an evil to an 40 00:03:04,970 --> 00:03:05,620 attack. 41 00:03:05,810 --> 00:03:12,110 And we see how we can use that to gain access to WPA or WPA to networks and we also see how to use that 42 00:03:12,110 --> 00:03:15,890 to gain access to captive portals. 43 00:03:15,890 --> 00:03:22,050 Now in both of these methods we're relying on the humans on the users that use the network. 44 00:03:22,100 --> 00:03:29,460 So when it goes down to that then there is nothing you can do in terms of the software or the hardware. 45 00:03:29,510 --> 00:03:33,340 The hacker is literally exploiting the people that use the network. 46 00:03:33,470 --> 00:03:37,520 So the only thing you can do in this case is educate your users. 47 00:03:37,520 --> 00:03:44,780 So if you have a small group of users you can just have a talk and tell them here look this is an attack 48 00:03:44,780 --> 00:03:45,890 that can be used. 49 00:03:45,890 --> 00:03:50,530 Be careful from it if you get the authenticated or disconnected from your network. 50 00:03:50,540 --> 00:03:55,370 Make sure when you connect that you connect to the same network and make sure that the network you're 51 00:03:55,370 --> 00:03:58,900 connecting to is actually using encryption. 52 00:03:58,910 --> 00:04:00,680 So it's not an open network. 53 00:04:00,950 --> 00:04:07,040 Also tell them never enter the network key in a web interface because as we seen when we're running 54 00:04:07,040 --> 00:04:12,580 the evil twin attack we always ask for the password and a web interface. 55 00:04:12,980 --> 00:04:15,710 So make sure that your users know. 56 00:04:15,770 --> 00:04:19,420 They should never answer the key and a web interface. 57 00:04:19,520 --> 00:04:24,560 And if they already enter the key they'll never be asked for it again unless they clicked on Forgot 58 00:04:24,560 --> 00:04:27,010 the network which they should know. 59 00:04:27,380 --> 00:04:32,990 So to summarize if you want to secure your network from the Ganey got attacks that we've seen so far. 60 00:04:33,020 --> 00:04:39,830 First don't use captive photos implementable Dhupia enterprise if you want a similar functionality to 61 00:04:39,950 --> 00:04:49,910 never use WEP three disable W.P. as for use WPA or WPA too with a complex password of letters characters 62 00:04:49,910 --> 00:04:52,660 numbers and symbols. 63 00:04:52,700 --> 00:04:53,500 5. 64 00:04:53,600 --> 00:04:59,030 Educate your users to make sure they to be victims of a social engineering attack. 7049