Wireless Terms Unit 2

Wireless Terms Unit 2

1. 802.1X

   • EAP The Extensible Authentication Protocol (EAP) is a protocol for wireless networks that expands on authentication methods used by the Point-to-Point Protocol (PPP), a protocol often used when connecting a computer to the Internet. EAP can support multiple authentication mechanisms, such as token cards, smart cards, certificates, one-time passwords, and public key encryption authentication.
     • CCMP. Wireless encryption protocol which implements 802.11i (WPA2). Uses CTR for data confidentiality and CBC-MAC for authentication and integrity
     • AES. Advanced Encryption Standard is an encryption algorithm with a block size of 128 bits and supporting key lengths up to 256 bits
     • Compare
       • WEP. Now vulnerable 40-bit encryption algorithm
       • TKIP. An integrity check (not encryption algorithm) designed to be used with WPA.
       • RC4. Uses the Rivest Cipher stream cipher. Used to be used in TLS but has since been deprecated due to vulnerabilities
       • WPA/WPA2. WPA2 is now the industry standard. AES is mandatory for WPA2 but not WPA.

2. RSN. Robust Security Network or WPA2 implementing AES-PSK

3. WPS Wi-Fi Protected Access. WPA Personal or WPA2 Personal security protocols. Uses a discovery system similar to that of Bluetooth to connect a device to the network without using a long passphrase.

4. WIDS Wireless Intrusion Detection System. Logs and monitors any anomalies on the network

5. SIEM/Mobile Device Log Files. Security Information and Event Management, offers a comprehensive view of network logs and events through collecting logs, and mapping information about your infrastructure and business processes to those logs. 

6. Hotspots and Captive Portals. Hotspots are access points which offer Wi-Fi access to the public. Captive Portals are the landing pages provided by the hotspots that often require a passphrase or payment to continue to access the Wi-Fi