Network mitigations

The policies and practices adopted to prevent, monitor, and recover from network attacks.

---

Basics

• Introduction
• Upgrade router firmware
• Protect router management
• Turn it off
• Port forwarding
• Services audit

OpenWRT

• Introduction
• Flash router with other firmware
• DropBear SSH public key authentication
• Nethogs
• Portknocking

Wireless

• Introduction
• Reduce wireless signal strength
• Change router defaults
• Disable SSID broadcasting
• Enable encryption
• Notes on WPS
• Unauthorised devices
• Restrict by MAC address
• Use certificate-based security

Intranet

• Introduction
• Add a NAT router
• LAN segmentation
• ARP
• DNS
• NFTables
• Snort box

Internet

• Introduction
• BGP hijacking mitigations
• Certificate validation

---