Wireless Network Security Quiz

Wireless Networks Security

• This presentation covers various aspects of wireless network security.
• The content spans wireless security, mobile device security, IEEE 802.11 wireless LAN security, and wireless network components.

Key Factors

• Channel: Wireless communication is vulnerable to eavesdropping and jamming, and active attacks.
• Mobility: Portability creates risks, as devices can be left unattended, which makes them vulnerable to physical attacks.
• Resources: Limited computing resources reduce the ability to defend against denial-of-service attacks.

Wireless Networking Components

• Endpoint: Devices like laptops, etc.
• Wireless Medium: The airwaves used for wireless communication.
• Access Point (AP): A central point for wireless network communication.

Wireless Network Threats

• Accidental Association: Users might connect to the wrong wireless network due to overlapping signal ranges.
• Malicious Association: Attackers may create fake access points to steal passwords and gain access to the network.
• Ad Hoc Networks: Peer-to-peer networks with no central control, posing security risks.
• Nontraditional networks: Devices such as Bluetooth devices, barcode readers, introduce security risks like eavesdropping and spoofing.

Wireless Network Threats

• Identity Theft: Attackers eavesdropping and obtaining network credentials.
• Man-in-the-Middle Attacks: Interception of communications to steal or manipulate data.
• Denial-of-Service Attacks: Flooding a network with requests to prevent legitimate users from accessing it.
• Network Injection: Attackers injecting malicious code to compromise network resources.

Securing Wireless Transmissions

• Countermeasures: Signal hiding, reducing signal strength for better coverage, and encryption to secure data transmission.
• Wireless transmission principle threats: Eavesdropping, alteration of messages, disruption.

Securing Wireless Access Points

• Main threat: Unauthorized network access.
• Principal approach: IEEE 802.1X for port-based network access control, also to prevent rogue APs.

Securing Wireless Networks

• Use: Encryption with built-in features, antivirus software, anti-spyware, and firewall software.
• Change: Update router identifiers, default passwords.
• Allow: Specific computers to access a wireless network.

Organizational Requirements of Mobile Devices

• Critical for overall network infrastructure.
• Security was based on defined perimeters separating trusted internal networks from untrusted Internet networks previously.
• Due to massive changes such as a large number of devices, cloud-based applications, de-perimeterization, and external business requirements, accommodating modern network infrastructure is needed.

Mobile Device Security Threats

• Lack of Physical Security: Mobile devices can be stolen.
• Device Untrustworthiness: All devices aren't reliable.
• Untrusted Networks: Potential security risks on unreliable networks.
• Application Usage: Risks from untrusted application usage.
• Interaction with Other Systems: Security issues from mobile device interactions with other systems.

Mobile Device Strategy

• Traffic Encryption: Using SSL or IPsec VPN tunnels.
• Mobile Device Configuration: Security mechanisms to comply with organization policy.
• Application/Database Server: Providing secure application access.
• Firewall: Limiting data and application access to ensure network security.
• Authentication/Access Control Server: Verifying and restricting access to authorized devices and users.
• Authentication and Access Control: Using protocols for verification and access levels.

Categories of Principal Mobile Device Security Elements

• Device Security: Practices like auto-lock, password protection for passwords, software updates, antivirus, and firewall protection.
• Client/Server Traffic Security: Encrypting traffic with protocols like SSL and VPNs.
• Barrier Security: Employing firewalls and intrusion detection systems.

IEEE 802.11 Wireless LAN

• Terminology: Definitions and explanation of terms like access point (AP), basic service set (BSS), coordination function, distribution system (DS), extended service set (ESS), MAC protocol data unit (MPDU), MAC service data unit (MSDU), and station.
• Protocol Stack: Describes the layers of the protocol stack for wireless networks.
• MPDU Format: Illustrates the structure of a MAC Protocol Data Unit (MPDU), showing MAC control, destination and source MAC addresses and a CRC.

IEEE 802.11 Wireless LAN Services

• Services: Explains the different services provided by IEEE 802.11 such as Association, Authentication and Deauthentication.
• Transition Types: Describes no-transition and transition between BSSs and ESS.

IEEE 802.11i Wireless LAN Security

• Standards: Discussion of the security standards for 802.11i, including Wired Equivalent Privacy (WEP), Wi-Fi Protected Access (WPA), and WPA2.
• Network Security: Robust Security Network, protocol stack overview.
• Wireless LAN Security: Details on how to secure a wireless network and threats.
• Wireless LAN Security - Standards: WPA and WPA2 secure implementations.
• Wireless LAN Security Protocol Stack: General protocol stack description.
• Wireless LAN Security - Services overview: Explains different network service function.
• Wireless LAN Security - Algorithms: Details of the algorithms.
• Wireless LAN Security - Phases of Operation: Details on Phases: Discovery, Authentication, Key Management, Data transfer and connection termination.
• Wireless LAN Security - Discovery phase: Discussion of confidentiality and authentication methods for discovery.
• Wireless LAN Security - Authentication (Open System Authentication): Explanation of the open system authentication process, showcasing an initial interaction.
• Wireless LAN Security Access Control Detail on IEEE 802.1X access control
• Wireless LAN Security - Key Management: Discusses cryptographic key exchange procedures, and different types of keys (group master key, pairwise master key, pairwise transient key).
• Wireless LAN Security - Protected Data Transfer: The temporal key integrity protocol and counter mode CBC MAC protocol.
• Wireless LAN Security - Pseudorandom function: Use of HMAC–SHA–1 for pseudorandom bit stream generation.