Network mitigations

The policies and practices adopted to prevent, monitor, and recover from network attacks.

Forever in progress? Why? See Network attacks

---

Basics @Home

• Introduction
• Upgrade router firmware
• Protect router management
• Turn it off
• Port forwarding
• Routing audit
• Services audit

---

OpenWRT @Home

• Introduction
• Flash router with other firmware
• DropBear SSH public key authentication
• Nethogs
• Portknocking

---

Wireless @Home

• Introduction
• Reduce wireless signal strength
• Change router defaults
• Disable SSID broadcasting
• Enable encryption
• Notes on WPS
• Unauthorised devices
• Restrict by MAC address
• Use certificate-based security

---

Router audit scripts @GitHub

• Intranet router audit scripts
• ISP-grade router audit scripts
• Carrier-grade router audit scripts

---

Intranet

• Introduction
• Secured NAT router
• LAN segmentation
• ARP mitigations
• DNS mitigations
• NFTables
• Snortbox as IDS
• Beyond basic protections

---

Internet

• Introduction
• Critical internet-wide mitigations
• BGP hijacking mitigations
• Certificate validation
• Deploying Resource Public Key Infrastructure (RPKI)
• Defending from DDoS
• GDPR compliance checklist
• Adopting Post-Quantum Cryptography (PQC)
• Enabling DoH/DoT in browsers

---

Tomes

https://www.packtpub.com/product/nmap-network-exploration-and-security-auditing-cookbook-third-edition/9781838649357

https://nostarch.com/nsm

https://www.wiley.com/en-us/Artificial+Intelligence+and+Data+Mining+Approaches+in+Security+Frameworks-p-9781119760436