我会在这一次课程中给大家讲解，为什么无线网是黑客的主要攻击对象？
在之前的课程中，我也曾经提到过这一点，
现在我想更深入的给大家讲解一下。
此外，我会讲解除了缺乏专业的信息安全知识之外，
还会讲解管理员为什么不能很好的保护他们的无线网络？
无线网是黑客的主要攻击对象，
不仅仅是因为无线网的覆盖范围广泛，
还有无线信号的类型多样性，
信号的踪迹不易被发现，且容易被攻击等特点。
现在无线设备遍布城市的大街小巷，
我们在任何时间地点都能搜索到无线信号并传输信号。
对于黑客来说，有很多机会来发起攻击，
比如帧听信号，渗透攻击，拒绝服务攻击等。
种种的攻击都可以在距离攻击对象较远的地方完成。
这样我们的攻击不容易被反追踪，
我们也不必被抓去坐牢，
当然这也是避免被反追踪的一种手段。
说这些听起来有点扯。
根据我的经验，有很多的用户
使用了无线网络的默认设置。
这听起有点震惊，除非了你们亲自去看看，
你会发现，无线网络接入点的默认密码
一般就是连接无线的密码，
SSID是默认的，信号频率是默认的，加密方式是默认的，
通常在无线设备初始化的时候这些都被设置好了。
主要是因为用户在使用无线设备的时候不考虑安全因素，
只有极少的用户设置他们应该设置的无线服务，
只有极少数用户会使用引导天线，
确保信号只在内部使用不被外部使用。
大部分用户都没有做这些该有的设置，
这意味着信号对于一名攻击者来说是泄露的。
潜在的存在这样一种威胁，
攻击者可以通过默认的设置查询默认的密码，
重新定义MAC地址，重新定义所以信息，
或者对网络发起攻击，
所有的这些对攻击者来说都是小菜一碟。
这就好像用黑客的长处来应对网络的短处，
黑客们的优势在于对无线网络的专业知识
以及对用户配置的了解，
网络的弱势在于用户缺乏专业知识
并且缺乏保护无线网络的安全的途径。
有些攻击要积累大量的信息
才能完成无线网络的攻击。
所以黑客门还需要逐个字节的去兼听
以累计足够的信息来达到入侵的目的。
就比如要完成针对无线网络的一次强有力的攻击，
随着可信数据不断的在无线网络中传输，
我们可以捕获和监听更多的数据，
然后我们可以用积累的数据来完成一次强有力的野蛮攻击。
事实上确实与之相反，
管理员在无线中添加了越来越多的东西，
认为这对于预防攻击来说会更安全，
这简直就是一颗定时炸弹。
我们攻击者只需要
发现管理员的错误来让攻击变得简单。
那么为什么管理员没有很好的保护他们的无线网络呢？
well most of them don't really know about wireless security at all
they don't have a lot of training they don't have a lot of skill in it
they don't go to four-week classes on wireless networking in general
let alone wireless security
so they may have a one hour two hours of training on it from a vendor
but that's really most of it
in fact many administrators don't even have that much
that's great for an ethical hacker
because that ignorance allows us to mount an attack
based on their knowledge gaps
and wireless security is also kind of a pain to implement
it at all certainly in a way that makes users
happy and and makes things easy so for example if
users have to enroll for certificates and have to actually connect to the
network and run scripts or do some kinda Group Policy work
in order to get their devices on the wireless network
well first of all that sets a fairly high bar for which clients can and
cannot connect to wireless
which is almost feeling the purpose of having wireless
second ball many users just don't have the technical wherewithal to do that
kind of work
so they're not going to so the administrators left in a tough spot
do I bounce the users they can't connect
which could cause political ramifications could cause usability
could cause lack I've capability manipulation
or does the administrator balance undecided usability
in either we can or remove the security on the wireless networks
interestingly enough if you taking this course you probably think well of course
the balance on the side I love
higher security and then if users don't have to deal with it they should get off
or they should ask
it's almost always the opposite typically speaking administrators will
weekend or eliminate wireless network security
when necessary I work with a client not very long ago
who literally stopped in the middle other wireless security configuration
project
and backed everything out to open wireless networking
because they didn't know how to make the clients work properly so rather than
shutting off the wireless or rather than configuring the clients they literally
just made the wireless network
open everyone can associate everyone can actually transmit/receive
all data that could be a problem but not for us
because we're ethical hackers and frankly we like that
and finally there's a lot of standards that go into
wireless network security WiFi security is actually quite a complex own thing
and the number of standards the complexity of the standards and how they
interact
makes it so that even administrator that has training and does
focus on this and does concentrate in this area
does have a bit of a challenging time getting this stuff
fully understood so that they can properly analyze it
deploy it and then operated and usually the operate is the difficult part
because many administrators can figure out headache had to plan it out and how
to deploy it
but when things break one of the first bit stay cozy security
if something doesn't work if if users can't access
in a wireless scenario many times the first thing that goes his security turn
that off let's see if it works now
you owe your television can't connect to renew monitor can connect or your
printer can't connect
will shut off wireless security and maybe
the intention is just to shut it off for a little while just to shut it off for
troubleshooting
but if it doesn't go back on that's a major problem
were if it goes off even for testing or troubleshooting
while the Ethical Hacker is running their tests and probing
well there we go we're into the network and we're probably never going to be
gotten back out of the network