Module 13: Wireless Network Security

Wireless Terminologies

❌
The MAC address of an access point that has
set up a Basic Service Set (BSS)

I❌
A set of frequency for the international
Industrial,scientific, and Medical
communities

❌
Used to connect wireless devices to a wireless
network

❌
Places where wireless network is available for
public use

Orthogonal ❌
Mulüplexing (OFDM)
Method of encoding digital data on multiple
carrier frequencies

DWect-sequence ❌
(DSSS)
Original data signal is multiplied with a pseudo
random noise spreading code

Frequency-❌
(FHSS)
Method of transmitting radio signals by rapidly
switching a carrier among many frequency
channels

Wireless Network Topology

❌/ local Area Wireless Network (❌): WLAN technologies connect users within a local
area. Area can be a corporate or campus building, or a public space, such as an airport.

- uses wireless transmissions ratherthan wires to communicate between the nodes
- The ❌ specifies the tech nologies for wireless
- ❌ waves or in❌ can be used as a carrier to communicate

Wireless Personal Area Network (WPAN): It is a ❌ and hoc network providing
instantaneous connectivity to the user. Generally, it is known as Bluetooth

- WPAN is a network for interconnecting devices ❌e
- It allows communication within a short range, i.e. about ❌
- This network can be made possible with network technologies such as ❌ (Infrared Data Association (IrDA)) and ❌th
- ❌ a WPAN

Wireless Metropolitan Area Network (WMAN): WMAN technologies allow users to
communicate wirelessly between different locations within a metropolitan area. That area
can encompass a university campus or multiple offices in a city

- A WMAN is a wireless communication network that covers a metropolitan area
- It connects the multiple WLANsover a ❌
- It offers broadband network access via ❌
- It normally uses w❌ connections to link its sites

Wireless Wide Area Network (WWAN): It connects the notebooks and handheld
computers to the Internet using digital cellular networks across ❌

- A WWAN is similarto a WLAN ,but covers more area than WLAN
- Its coverage is offered on a ❌
- It allows usersto have access to the Internet, email, and corporate applications and information even while away from their office

Types of Wireless Encryption

The following are the various wireless encryption algorithms developed so far:
-❌: A WLAN data encryption protocol and it is an old, original wireless security standard
that can be cracked easily.

-❌: It is a WLAN data encryption protocol using TKIP, MIC, and AES encryption. It uses a 48-bit IV, and TKIP encryption for wireless security
-❌: WPA2 uses ❌ for wireless data encryption.
-❌se: It integrates ❌ as WPA encryption.
- -❌: A security protocol ❌
- -❌: It is a symmetric-key encryption, ❌.

-❌: A proprietary WLAN authentication protocol ❌. Kerberos,
-❌: Supports multiple authentication methods, such as ❌
-❌: A centralized authentication and authorization management system
❌ An IEEE standard that specifies security mechanisms for 802.11 wireless networks.
-❌: CCMP uses AES with 128 bit keys and a 48-bit packet number for integrity and replay protection.

web - ❌
wap - ❌

Temporal Key Integration Protocol
(TKIP) The features of Temporal Key Integration Protocol (TKIP) are as
follows:

-❌ the encryption algorithm used
-It generates new key after every ❌
-The ❌
-It checks for integrity of the message

Advanced Encryption Standard (AES) has the following features:

-Keys used are ❌
-Requires less ❌
-❌ size is 128 bits

WPA recuerda

.
TKIP (Temporal Key Integrity Protocol):
- TKIP utilizes the RC4 stream cipher encryption with 128-bit keys and 64-bit ❌

128-bit Temporal Key:
- Under TKIP, the client starts with a 128-bit '"temporal key" (TK) that is then ❌ and with an IV to create a key that is used to encrypt data via the RC4. It implements a sequence counter to protect against ❌

WPA2

WPA2 offers two modes Of operation:

❌
-This version makes use of a setup password ❌ and protects unauthorized network access. In PSK mode each wireless network device encrypts the network traffic ❌ that is during the four-way handshake, and can be entered as a passphrase of 8 to 63 ASCOO characters.

❌
-This confirms the network user ❌ It includes ❌ authentication using multiple authentication methods, such as token cards, Kerberos, certificates etc. Users are assigned ❌r which they must present when connecting to the network.

Wi-Fi Chalking -- techniques to detect open wireless networks.

❌: To perform WarWalking, attackers walk around with Wi-Fi enabled laptops
to detect open wireless networks.

❌ WarFlying is an activity in which attackers fly around with Wi-Fi enabled
laptops to detect open wireless networks.

❌ According to www.wordspy.com, WarDriving is a computer cracking
technique that involves driving through a neighborhood with a wireless enabled notebook
computer, mapping houses and businesses that have wireless access points.

❌: This term comes from whackers who ❌ (una marca) to place a special symbol on
a sidewalk or another surface to indicate a nearby wireless network that offers Internet access. It is a method used to ❌ in public places to advertise open Wi-Fi networks.

WIRELESS THREATS

❌
Wireless access control attacks aim to ❌ by evading wireless LAN
access control measures, such as AP MAC filters and Wi-Fi port access controls. There are
several kinds of access control attacks.

❌
In integrity attacks, attackers send ❌es over a
wireless network to misdirect the wireless devices in order to perform another type of attack

Wireless Threats: ❌
These attacks attempt to ❌ sent over wireless associations, whether sent in the clear text or encrypted by Wi-Fi protocols.

Wireless Threats: ❌
These attacks aim at obstructing the delivery of wireless services to legitimate users, either by ❌ or by denying them access to WLAN resources. There are many attacks an attacker can use to obstruct the availability of wireless networks.

Wireless Threats: ❌
The objective of authentication attacks is to ❌ of Wi-Fi clients, their personal information, login credentials, etc. to gain unauthorized access to network resources

Wireless Threats: ❌
Unauthorized access points can allow anyone with an 802.11-equipped device onto the corporate network, which puts a potential attacker close to the mission-critical resources.

Wireless Threats: ❌
Denial of Service Attacks DOS is an incident in which a user or organization is deprived of the services of a resource they would normally expect to have e DOS attacks disable the network by ❌

Wireless Threats: ❌
A Man-in-the-Middle (MITM) attack is a type of attack in which attacker is able to ❌ in between two users.
This attack is also called TCP
hijacking

WIRELESS SECURITY

Wireless Transportation Layer Security (WTLS)

WTLS depend on the Transport Layer Security protocol (TLS) and it is a derivative of
the ❌
Provides:
-Privacy
-Integrity of the data
-Authenticacion

Extensible Authentication Protocol (EAP) Methods

Common methods used by EAP are as follows:
TLS: It is a certificate based two way authentication (dos clientes)
TTLS: This authentication uses certificates for the server side and a simple method forthe client side
MD5: It is a challenge based password authentication
LEAP: It is Cisco's proprietary username based authentication