Original subtitles

OK.

Now let's talk about how to secure your systems from the attacks that we've seen so far.

So the first thing that we seen was the authentication attack and we see how that can be used to disconnect

any device from any network without having to know the network key even if the network uses encryption.

Now unfortunately there is no proper way of protecting against this attack.

So there is no way for you to prevent people from sending the authentication packets.

The only proper way to protect your systems from this attack is to move to the age old to dot 11 w standard.

Now the standard uses protected management frames which is a method designed by Cisco to detect and

protect against the authentication attacks.

The only thing that you need to keep in mind is both the access point and the clients connecting to

this access point need to support the standard.

Now I'm going to include links in the resources of this lecture for more information about protective

management frames and the age old to dot 11 w standard.

So feel free to go and read more about it.

The next thing that we've seen is how to discover the names of the networks.

Now we see how easy it is to discover the names of hidden networks.

So you simply shouldn't use that or think of that as a way of protecting a network.

You can hide and the network name if you want but don't think that'll protect you from hackers.

The next thing that we've seen was bypassing back filtering whether it's implemented using a blacklist

or whitelist.

Now we see how easy that is.

And from that you should already know that you shouldn't use MAC filtering for access control.

If you want to be able to control the actions of individual clients on your network then don't rely

on the MAC address instead use WPA enterprise with a radius server so that you authenticate each user

individually so each user will have their own user name and their own password and password will be

sent using WPA or WPA.

So everything is going to be encrypted and secure.

And at the same time you'll be able to control the access for each individual user.

So if there a certain user that you want to deny them from connecting you just to leave their password

from the radius server.

So you never rely on the MAC address now I'm going to talk about the enterprise later on in the course.

So just wait for that lecture and you'll learn more about how they work and what they can be used for.

But for now switch to 8 or to that 11.

W if you can support it to prevent the authentication attacks.

Never use it the networks or at least don't think that using a hidden network will secure you or secure

your network.

Third don't use blacklists or whitelist as a method of access control.

Do not rely on the mac address if you want to control the access of clients connect into your network.

Then use WPA enterprise.

And we'll talk about developing enterprise later on in the course.