Willie Harris
-------------------------------------------------
is3230 lab 4.2
Implement Organizational-Wide Network and WLAN Access Controls

1. Each time you open a port or allow a program to communicate through a firewall, your computer becomes a bit less secure. The more allowed programs or open ports your firewall has, the more opportunities there are for hackers or malicious software to use one of those openings to spread a worm, access your files, or use your computer to spread malicious software to othersEach time you open a port or allow a program to communicate through a firewall, your computer becomes a bit less secure. The more allowed programs or open ports your firewall has, the more opportunities there are for hackers or malicious software to use one of those openings to spread a worm, access your files, or use your computer to spread malicious software to others. 2. 2. By going to start -> control Panel -> Select firewall there it gives you the options that are on Windows Firewall. 3. First if you’re sitting in a coffee shop and decide you want to check your Facebook page and your email to kill some time. You scan the available networks and see one that’s open and unsecured. You connect and start surfing. Coffee and free WiFi, what could be better, right? Wrong! A hacker is also fond of coffee shops and he is located within range of the router you connected to. He’s waiting for one or more people to connect to the network so he can start a man in the middle attack. Within a few minutes, he could gain access to all your passwords, including bank accounts, emails etc… Evil twin hotspot: These are hot spots set up by a hacker and made available to the public. Unknowing users who connect to the Internet using these access points are then exposing their sensitive information to the hacker. Third, remember even if the network is encrypted, your communication is safe only from people who aren't on the network. All the other denizens at the hotspot can easily see your traffic because they are logged on with the same password. 4. NIC, Access Point, Wireless NIC 5. Cell Phones, email, Instant messaging, Bluetooth and VOIP 6. Blues tooth differs from WLAN because is it less secure, lower bandwidth, but it is easier when using it on a mobile platform with calling and or wireless keyboards and mouse’s. 7. Depending on whether the computer and or laptop is accessing the network you could have different polices that you may have for wired machines and wireless machine that will only allow certain access to certain networks. 8. Basically, it has been found that WEP is not as secure as once believed. WEP is used at the two lowest layers of the OSI model - the data link and physical layers; it therefore does not offer end-to-end security. Use: Establish wireless LAN security policies and practices, logically separate internal networks, enable VPN access only and protect wireless devices. 9. Man-in-the-Middle Attack is a form of active eavesdropping in which the attacker makes independent connections with the victims and relays messages between them, making them believe that they are talking directly to each other over a private connection, when in fact the entire conversation is controlled by the attacker. 10. A network injection attack, a cracker can make use of access points that are exposed to non-filtered network traffic, specifically broadcasting network traffic such as “Spanning Tree” (802.1D), OSPF, RIP, and HSRP. The cracker injects bogus networking re-configuration commands that affect routers, switches, and intelligent hubs. A whole network can be brought down in this manner and require rebooting or even reprogramming of all intelligent networking devices.