2KKUU7ita

184
Part III: Hacking Network Hosts
Countermeasures against default
configuration settings exploits
You can implement some of the simplest and most effective security countermeasures
for WLANs — and they’re all free:
✓ Make sure that you change default admin passwords and SSIDs.
✓ At a minimum, enable WPA. Ideally, you should use WPA2 with very
strong pre-shared keys (PSKs) consisting of at least 20 random characters
or use WPA/WPA2 in enterprise mode with a RADIUS server for host
authentication.
✓ Disable SSID broadcasting if you don’t need this feature.
✓ Apply the latest firmware patches for your APs and WLAN cards. This
countermeasure helps to prevent various vulnerabilities to minimize the
exploitation of publicly known holes related to management interfaces
on APs and client-management software on the clients.