| - | The wirelessnetwork has become a part of the work and personal life .How to protect the wireless network from security threat has become and will continue to become the enterprise overall security system is an important part of .<br>But just as Darwin revealed by various myths ,wireless security with the birth ,evolution ,and then will be replaced by some new myth .But with the wireless security ,the facts seem to have to the network security professionals with enough information ,can break certain wireless security myth ( for example ,the SSID hidden can improve the safety belt filter ,abercrombie paris;MAC open AP can provide better security ,hollister pas cher;using a static IP address may be blocking the attackers ;WEP can provide enough good safety etc,air jordan.<br> ) .More and more users into the WPA2 fact also confirmed this point .The current PCI DSS wireless Guide ( perhaps by the famous ,large-scale TJX security leaks out ) certainly pushing these security deployment .<br>But on the other hand ,wireless security community is still lack of treatment by unmanaged equipment and security caused by threatening the ability .This ability of the missing also enables a group of newly emerging wireless security myth is more difficult to be exposed ,abercrombie.<br>Now let us briefly look at these new myths ,and discuss how the enterprise can avoid these common pitfalls or error .Myth 1 :if there is no deployment of Wi-Fi ,the enterprise is safe .Many people still believe that ,if they make a Wi-Fi strategy ,so they are safe .<br>I wish wireless security really is so simple .The real world is not likely to be a people to trust each other in the world, no one would be naive to think that one can never violate the strategy .<br>A nurse a grievance employees may quietly placed a rogue access point ( AP ) ,even well-intentioned employee may also install a AP ,thus inadvertently exposed to the enterprise network attack behavior .<br>Similarly, now the vast majority of notebook or netbook built-in Wi-Fi card may also become a potential threat to the source -- may be used by an attacker .And further ,the other is embedded in a notebook or netbook wireless technologies ,such as Bluetooth ,may also produce serious security vulnerabilities .<br>Real case :since that Wi-Fi strategy can protect the enterprise network security ,this is undoubtedly to the ostrich head buried in the sand stupidity .Myth 2 :in the network using the WPA2 ,I will be safe .<br>If your company has deployed with WPA2 security functions in the Wi-Fi network ,it is certainly a good place to start .WPA2 WLAN Ap and the client for the enterprise to provide more powerful password security .<br>But in a large scale network deployment ,only to ensure that all equipment without inadvertent errors in configuration ,air jordan pas cher,did not give the attacker left an opportunity ,it is the most important .<br>As the Wi-Fi is used to carry the mission critical applications ,hackers and criminals also focus to break the Wi-Fi security measures .Researchers recently disclosed ,WPA-TKIP for packet injection attack is the lack of immunity .<br>Similarly, there have been reports ,Cisco WLAN controllers can be used to hijack Cisco LAP .The actual situation based on WPA2 :WLAN deployment may not protect against all types of wireless security threats .<br>Myth 3 :enable 802.1X port control ,I is safe .IEEE 802.1X port control may provide an authentication mechanism ,to each of the hope that through the port communication equipment safety certification .<br>Only through certification ,the device will be allowed to communicate .If the authentication failure ,through this port communication will be prohibited .However ,802.1X designer purpose is not to protect the network from a wireless security threats .<br>As we expected, 802.1X in the prevention of Wi-Fi client threat is totally incapable of action .Even if the 802.1X port control can prevent cheating AP communication ,but it can still easily be hidden cheat AP bypass .<br>For example ,if an employee has received 802.1X certification ,he can use a static IP ,to Silence mode configuration he needed to connect 2 layer bridging AP ( thus ,the AP can never be in the network is identified ) .<br>He then can give the Wi-Fi client a disguise the identity (i.e., MAC address ) ,thereby fooling a 802,louboutin.1X port control .Situation :it is a basic problem ,802.1X is providing a control (also known as entrance control ) ,air jordan pas cher,and the real needs of the enterprises is continuous monitoring .<br>Myth 4 :my NAC solution will protect me from Wi-Fi threat ,abercrombie.NAC aims to based on the strategy of controlling access to a network ,which includes a access endpoint security policy check (to determine who can access network access control ) and after ( determine access to visit what ) .<br>Because the NAC solution also includes some host checks ( such as running on the host operating system and services ) ,so can prevent cheating as a router or the NAT function AP .NAC in the prevention of silent cheat AP threat is incapable of action .<br>Reality :the same as 802.1X, NAC also is a kind of entry control ,so the 802.1X argument is equally applicable to NAC .Myth 5:802.11w can eliminate the Wi-Fi DoS attack .The nature, Wi-Fi vulnerable to DoS attacks ( such as radio frequency interference ,abercrombie france,authentication / releasing connection flood ,virtual interference etc.<br>) .Use of unauthorized wireless spectrum plus a simple MAC agreement ,on the Wi-Fi can initiate a DoS attack .IEEE recently adopted the 802,hollister.11w standard ,the standard solutions for some 802.<br>11 management frame set ( such as authentication frame ,jordan,lifting frame connections ) password protection problems .The standard is based on the framework of protection can alleviate the attack .<br>The actual situation based on various frameworks :attack is in fact 802.11w protective boundaries ,and attacks by making use of the radio spectrum is always possible .Myth 6:AP part-time safety function is enough .<br>The WLAN infrastructure can support such a model ,a AP can be programmed into a wireless intrusion detection sensors .However ,if you need a higher level of protection ,for example, want to comply with the industry or government regulation ,that you need is wireless intrusion prevention ( not just the intrusion detection ) ,because when a AP from the access function switching to provide protection function, it can also provide only partial protection .<br>Have AP equipment may not be safe to spend a lot of time cycle ,if they do so, then it may affect the data / voice carrying device performance .Therefore, in the use of the model ,such devices are scanned for viruses and lessen the threat would spend less time .<br>In this way ,can generate threat detection delay ,even may severely affect the forbidden / prevention ability ,air jordan.Situation : part-time sensors in reliably limiting the threat is very unreliable ( for example of such sensors can perform continuous and frequent stop transmission of the packet ) .<br>Obviously ,from the management of wireless security equipment threat needs to be focused on .To solve this problem is the first step for your enterprise development of wireless security strategy -- determine which communication is authorized ,which unauthorized .<br>The second is to assess the enterprise specific security risks ,and additional specialized tools ,such as wireless intrusion detection and defense system .Last ,but not least important, wireless security or person and user education issues ,this one problem in reducing the safety risk is a need to solve the problem of unremittingly .<br>相关的主题文章：
| |
| - | new Liaoning network August 22 report (Shen Diancheng Gong Xu) on the morning of 22 March 11, a delivery of 12 aircraft through the clouds and fog,hollister pas cher, a smooth landing in Faku County Finance Lake general airport.<br>This has just been completed in Shenyang county general airport,christian louboutin pas cher, ushered in the first plane,hollister.All of a sudden, Faku finance Lake Airport is jubilant,supra.The delivery of 12 aircraft to take off from TangShan Sannuhe Airport at nine thirty, 11 a.<br>m. to finance Lake general airport.That day afternoon 3 points,air jordan pas cher, a R44 and a Baer 206 and landed in finance Lake general airport.The helicopters in August 22nd 9 a.m. in Beijing Miyun general airport, via Chaoyang Airport,hollister france, at 3 p,hollister.<br>m. at finance Lake general airport,franklin marshall.In addition, 4 a aircraft in finance Lake general airport for flight, flight test is very successful,air jordan.The first aircraft arrived in finance Lake general airport, marking the finance Lake general airport officially put into use,supra pas cher, of great significance.<br>The current finance Lake general airport professionals have all in place, equipment debugging all normal, airport communications and navigation, air traffic control,supra shoes, weather,hollister france, field services, maintenance and so on are ready.<br>It is understood,hollister france, by Chinese private aircraft owners and Pilots Association and the Shenyang Municipal People's government sponsored by the “ 2012 Shenyang Faku AOPA International Congress of flight ” 3 days after the opening of.<br>This flight with “ share blue sky dream charm ” as the theme,louboutin pas cher, with large air show,abercrombie, static aviation equipment exhibition,jordan, low economic forum, the project signing and achievements as the main activity content, participants will appreciate the people with origami aircraft challenge the world record, aerobatics, skydiving performances such as excellent project.<br>Related articles:
| |
