How to secure a wireless network against hacking attempts?

[Thelps]

Hi all,

Could anyone on these forums provide me with a step-by-step guide on how to secure a wireless network based around a Netgear DG834PN router ( http://bc.whirlpool.net.au/bc/hardware/?action=h_view&model_id=391 ) against external hacking attempts, both via local wireless packet sniffing and any tips/guide on how to secure the network against people hacking my IP address via malware or any other means?

 

I am currently running WPA2-PSK encryption on the network.

 

Where are the vulnerabilities to spying/hacking/snooping attempts on the network? Malware is one, local wireless packet sniffing is another. What are the others?

 

My guess is the spy is someone I know, but this isn't certain, although means to trace them would be helpful also.

 

Much appreciation for all advice or references on where to look.

[featured_spectre]

Its been a while but if I remember rightly there are some linux based tools I have used to crack wifi passwords, and subsequently gain access to the networks. This was running normal WEP though.

[Oaktech]

if you are that concerned, then a good starting point would be to make the wpa pass phrase randomly generated, long and changed often, and then lock all access down to specific MAC addresses.

 

Buy a good antivirus suite that also deals with malware/spyware - we use eset endpoint.

 

Cain & Abel are the tools I use for packet sniffing / password cracking / resilience testing

[pcstru]

My guess is the spy is someone I know, but this isn't certain, although means to trace them would be helpful also.

 

Just out of interest, how exactly do you know there is a spy?

[themightymrp]

How about enabling MAC address filtering and just putting in the MAC addresses of the devices which are allowed to connect? Is this a home router?

[mac_shinobi]

Having a hidden SSID and changing the name of both the SSID and the long random passwords frequently whether this is once a fortnight or once a week etc ( up to you how frequent )

 

Jokingly I was going to say disconnect the mains power lead / cable from the wi-fi AP or router

[SYNACK]

Use WPA2 with a decent password, turn off WPS ( the easy pin code join ) and bes sensible with power settings.

 

Hiding the ssid and Mac filtering are largely pointless as WiFi scan apps find them easily and Mac filtering is defeatable in seconds with a packet scanner.

[psydii]

Make sure the AP firmware is up to date and the admin password is secure.

 

If there is a 'spy' they have probably found a tool for ripping the password out of a laptop... or you've let a guest onto the network, and they have unchecked the 'hide password' box and shared the results.

Edited January 22, 2013 by psydii