I have a wireless LAN and I am afraid of MITM attack, can someone give me guidance to what should be done to defend MITM attack ? I sometimes feel that there is some attacked in my LAN network and I get absurd messages or sometimes I get continues spam messages which is more than 500. please help
As you said that your LAN is Wireless so you need a WPA2 encryption, because with the new ip range ipv6 and with their new feature of network discovery they can automatically detect routers in network and use them, so if there is a intruder in the network then he can get to your computer and do MITM attack.
I don't have any WPA2 encryption and I also don't use any firewall so that I can defend the attack can you please make me understand what is this MITM attack? and how the intruders gets in the other computers?
MITM attack is the process in which the attacker becomes the middle man between the victim and the server and then he establishes an independent connection between the victim and himself., the victim thinks that everything is normal and he is talking to other person via a Private connection but all those messages are shown to the victim by the intruder and then they captures all the important data which the victim sends to the server which is in the form of data packets like usernames, passwords, important documents, but the intruder should be fast and he should be capable to intercept all the messages going between two victims and inject new ones.
Oh then what should I do to save my computer from the middle man(intruder)?
The best method for you to defend such attacks is that have a firewall on your computer, then never open unsuspicious websites and provide your passwords or important documents when the connection is secure i. e., if the connection is HTTPS because HTTPS connection has a 128 bit SSL encryption and such an encryption cannot be broken by any intruder and your data or your passwords are safely transported on the network.
For more safety use the latest version of Firefox because it has an add-on "HTTPS Everywhere", from this add-on there will only be secured connections to your computer and if it is an HTTP connection then check if it is a verified website or it is not a phishing website like "www.wwwfacebook.com" instead of "www.FaceBook.com", you will think that the first website is of FaceBook and then you will put your user id and password which will directly go to the intruder's database. So always be alert, check when you are providing your details like the websites name, if it is verified, it has any encryption. If you follow these steps then you can defend MITM attack.
