Attackers exploiting default configurations to gain access to the network and to information stored on devices in the network are major threat to home gateway devices. In order to mitigate this threat there are many common default configurations a user should change.
When setting up a home network, a user should make sure to change the default passwords. They should set up a strong account password and wifi password using best practices.The user should use a strong security protocol such as WPA2 instead of the default WEP which is not secure. They should also disable wifi protected setup so users can’t bypass the network password by using an 8 digit pin printed on the router as it is easily brute forced.
In order to make it harder for attackers to know what type of router a person owns as they could try to exploit known vulnerabilities of that specific router type, the user should change the default name of the network (SSID). In order to find the router’s IP address and default gateway they could run ip route on Linux or ipconfig on Windows. A user should change the default IP address and subnet of the router as the default addresses could be targeted by attackers. …show more content…
They should also disable remote administration and use private browsing when accessing admin interface so the URL is not saved in the browser history to further mitigate the risk of attackers to gaining admin access to the
When setting up a home network, a user should make sure to change the default passwords. They should set up a strong account password and wifi password using best practices.The user should use a strong security protocol such as WPA2 instead of the default WEP which is not secure. They should also disable wifi protected setup so users can’t bypass the network password by using an 8 digit pin printed on the router as it is easily brute forced.
In order to make it harder for attackers to know what type of router a person owns as they could try to exploit known vulnerabilities of that specific router type, the user should change the default name of the network (SSID). In order to find the router’s IP address and default gateway they could run ip route on Linux or ipconfig on Windows. A user should change the default IP address and subnet of the router as the default addresses could be targeted by attackers. …show more content…
They should also disable remote administration and use private browsing when accessing admin interface so the URL is not saved in the browser history to further mitigate the risk of attackers to gaining admin access to the