For more information on network security and management software solutions for real-time monitoring systems, please visit Lan-Secure.com: Network Management Software.
Every Network Interface Card (NIC) on any platform has unique MAC address that used to access Ethernet networks. The MAC address is hard coded by the network card manufacturer and on many security systems used as a platform identity for network access permission. Using the MAC address of a platform with network permission rights by an intruder or malicious software instead of its original address called MAC spoofing.
MAC address network access control
MAC address spoofing is quite an easy task for a potential intruder especially when using MAC address of network nodes that are inactive most of the time like network printers and networking time and attendance systems. This is the main reason for not using MAC address protection as a single network access control (NAC) mechanism but combining multiple protection methods to create safe and reliable security protection like Security Center: IDS IPS Network Access Protection and Switch Protector: NAC Network Access Control Monitoring network security scanners.
MAC address spoofing
There are some nice tools and drivers that can be found on the net that will change MAC address of specific platform to any other MAC address. But it can be done easily on any windows platform using the windows built in registry editor. Here are the steps needed to change windows platform MAC address and gain access to the network as another platform MAC address:
Changing MAC address
1. Open windows registry editor by clicking the Start button selecting Run command and typing "RegEdit".
2. Open registry folder HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlClass{4D36E972-E325-11CE-BFC1-08002bE10318}.
3. Select the appropriate network card folder by viewing the data written on the folder DriverDesc value.
4. On the network card folder create new String Value named NetworkAddress and modify its data to the preferred MAC address using its 12 hexadecimal characters in a row.
5. Reset the network card adapter by disable and enable the card from windows Network Connections control panel.
6. Use IpConfig /all windows command to verify the new network card MAC address.
Clearing MAC address
1. Open windows registry editor by clicking the Start button selecting Run command and typing "RegEdit".
2. Open registry folder HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlClass{4D36E972-E325-11CE-BFC1-08002bE10318}.
3. Select the appropriate network card folder by viewing the data written on the folder DriverDesc value.
4. Delete the String Value named NetworkAddress.
5. Reset the network card adapter by disable and enable the card from windows Network Connections control panel.
- Related Videos
- Related Articles
- Ask / Related Q&A
- Securing Networks with Cisco Routers and Switches:642-503 Exam
- Securing Networks With Pix And Asa Exam(Snpa):642-522 Exam
- Securing Networks with Cisco Routers and Switches:642-503 Exam
- Internet Security & Network Firewalls For Security
- 3 Strategies to a Secure Network
- Comptia A+, Security+, Network+ Tutorial – Ethernet Card Troubleshooting
- Randolph County Schools and Walling Data Team Up to Secure Network
- Deploying Secure Network Access
How to Prevent a Computer Virus and Protect Your Email?
By: Amy Zhou | 25/12/2009Viruses and other malicious PC threats can easily infect our computer systems. Basing on my personal experience and study from the Internet, I would like to share some tips about how to prevent computer virus and safeguard your email.
Koobface - How to Remove Koobface?
By: Amy Zhou | 25/12/2009"Koobface" is a kind of worm. With the increasingly large group of social network users, Koobface worm spreads crazily among Facebook users, so people also name it as Facebook worm. However, the name "Facebook worm" will soon be the past, because this worm has leaped out of the fence of Facebook, and madly sprung to other social network.
Computer Virus Removal - How to Remove Computer Virus Manually and Automatically
By: Amy Zhou | 25/12/2009Do you really know how to remove computer viruses when you are suffered by these terrible unexpected intruders? Actually, as long as you read this article, and learn some basic knowledge about computer virus, you should know several ways to manually or automatically remove them.
How to Remove the Trojan Downloader
By: Amy Zhou | 25/12/2009The Trojan-Downloader is a kind of Trojan, which once running will generate infection files, modify Registry and add Startup items, in order to make itself run at the computer startup. Use the antispyware program in safe mode to detect and remove Trojan-Downloader, and after which please download the Registry repair tool to repair your system Registry and check the startup items.
Free From Spyware Threats - You Need Real-Time Protection
By: Amy Zhou | 25/12/2009Many computer users are suffering from the compromising of spyware, virus, Trojan, or other PC threats. To get rid of viruses or Trojans, a security tool should contain not only effective technology in scanning out or detecting malicious threats, but also robust and complete mechanisms in removing threats and infections.
Staying Safe on the Internet
By: Hannah Miller | 25/12/2009If you are concerned about whether or not you are safe while you are on the Internet, there are a few precautions that you can take. It’s good to know a few basic things about Internet security and what could be a potentially harmful situation. Read more for some information about basic ways to protect yourself while you’re on the Internet.
TCP/IP Exploit Countermeasures
By: Steven James | 23/12/2009Increasingly, offenders and network intruders are using highly advanced tools and techniques to facilitate their offenses and evade apprehension, inventing new challenges for law enforcement, security professionals and computer forensic examiners. However, a TCP packet is a data structure comprising of a sequence number, an acknowledgement number for connecting the packets of a communication session, flags, source and destination port numbers.
The most recommended Spyware Protection in 2009
By: topsofts | 23/12/2009Spyware Doctor is one of the best-known spyware removal tools on the market. The program protects your system through real-time blocking, spyware scanning, and immunization against infections. The real-time scanner continuously monitors your memory and the web pages you visit. Spyware Doctor also monitors files, which try to run automatically on your system, and protects your system from security flaws. Whenever it detects a possible infection, it displays a dialog, allowing you to block the threat.
Windows syslog root cause analysis
By: info@lan-secure.com | 08/07/2009 | NetworksSyslog protocol is typically used for management systems and security auditing it is commonly used for integrating logging information from many different types of systems into a central repository. In large IT networks there are huge amount of syslog events that requires syslog root cause correlation analysis.
Network topology using Visio 2007
By: info@lan-secure.com | 19/06/2009 | NetworksUsing visual diagrams of networks asset for management and maintenance can improve the stability and performance of enterprise networks. Visio 2007 database capabilities can create a network topology diagram automatically using a simple script.
USB detection using WMI script
By: info@lan-secure.com | 19/06/2009 | SecurityUSB devices make it really easy for potential attacker to exploit unprotected computers with malicious virus and Trojan software and provide a gateway to the network for manipulating sensitive data. Detecting USB storage devices using the preinstalled Windows Management Instrumentation (WMI) on windows platforms is free and will only require a simple script.
SNMP management of Ten Giga ports
By: info@lan-secure.com | 19/06/2009 | NetworksUsing SNMP is the ideal way for managing network performance and traffic. Either doing it manually or using any preferred tool the exact port speed will be required for having accurate performance and traffic results. Trying to use the standard SNMP interface speed query on Ten Giga port will return a speed of about 4.3Gbps instead of the expected 10Gbps speed.