Wireless Network Security - Integrated Computer Security - Lecture Slides, Slides of Computer Security

Download Wireless Network Security - Integrated Computer Security - Lecture Slides and more Slides Computer Security in PDF only on Docsity!

Lecture 24

Wireless Network Security

Wireless Security Overview

• concerns for wireless security are similar to

those found in a wired environment

• security requirements are the same:
  • confidentiality, integrity, availability, authenticity, accountability
  • most significant source of risk is the underlying communications medium

Wireless Network Threats

accidental association

malicious association

ad hoc networks

nontraditional networks

identity theft (MAC spoofing)

man-in-the middle attacks

denial of service (DoS)

network injection

Securing Wireless Transmissions

• principal threats are eavesdropping, altering

or inserting messages, and disruption

• countermeasures for eavesdropping:
  • signal-hiding techniques
  • encryption
• the use of encryption and authentication

protocols is the standard method of

countering attempts to alter or insert

transmissions

Wireless Security Techniques

use encryption

use anti-virus and anti-spyware software and a firewall

turn off identifier broadcasting

change the identifier on your router from the default

change your router’s pre-set password for administration

allow only specific computers to access your wireless network

Wireless Fidelity (Wi-Fi) Alliance

• 802.11b
  • first 802.11 standard to gain broad industry acceptance
• Wireless Ethernet Compatibility Alliance
  • industry consortium formed in 1999 to address the concern of products from different vendors successfully interoperating
  • later renamed the Wi-Fi Alliance

IEEE 802 Protocol Architecture

General IEEE 802 MPDU Format

IEEE 802.11 Services

Distribution of Messages Within a DS

• the two services involved with the distribution

of messages within a DS are:

the primary service used by stations to exchange MPDUs when the MPDUs must traverse the DS to get from a station in one BSS to a station in another BSS

distribution

service enables transfer of data between a station on an IEEE 802.11 LAN and a station on an integrated IEEE 802.x LAN

integration

Services

• association
  • establishes an initial association between a station and an AP
• reassociation
  • enables an established association to be transferred from one AP to another, - allowing a mobile station to move from one BSS to another
• disassociation
  • a notification from either a station or an AP that an existing association is terminated

Wireless LAN Security

• Wired Equivalent Privacy (WEP) algorithm
  • 802.11 privacy
• Wi-Fi Protected Access (WPA)
  • set of security mechanisms that eliminates most 802.11 security issues
  • based on the current state of the 802.11i standard
• Robust Security Network (RSN)
  • final form of the 802.11i standard
  • Wi-Fi Alliance certifies vendors in compliance with the full 802.11i specification under WPA

IEEE 802.11i Phases of Operation

IEEE

802.11i

Phases

of

Operation