Chapter 24 - Wireless Network Security

How is channel subject to risk?

Broadcast communication subject to risk, such as eavesdropping or jamming.

How is mobility/portability subject to risk?

theft of portable devices.

How is accessibility subject to risk?

unattended sensors can be targeted as the weakest link.

Access Points

Devices that connect other devices to a network, akin to a station or hub.

Accidental Association

Automatically connecting to an incorrect network and performing tasks on an unsafe network.

MAC Spoofing/Identity theft

A technique where a device pretends to be another by changing its MAC address.

Network Injection

The act of injecting malicious code onto the network.

How can wireless transmissions subject to risk? How are they protected?

• eavesdroppers

  • encryption

  • signal hiding / halting broadcast of SSID

IEEE 802.1X

A network standard that provides an authentication mechanism for devices accessing a network.

IEEE 802.1X Security Methods

• encryption

• firewalls

• MAC filtering/whitelist

• identifier broadcasting/signal hiding

• change pre-set password

De-perimeterization

The concept that the security perimeter must also apply to new technology such as mobile devices which are subject to topical vulnerabilities

Wireless Protected Access (WPA)

The first protocol introduced by the Wi-Fi Alliance to secure wireless networks.

Wireless Fidelity (Wi-Fi) Alliance/Wireless Ethernet Compatibility Alliance (WECA)

organization that facilitates inter-operation between devices

Access Point (AP)

A device that provides access to a distribution system within a wireless network.

Basic Service Set (BSS)

A set of stations operating under the same function in a wireless network.

Distribution System (DS)

The system that connects different Basic Service Sets (BSS) together.

Extended Service Set (ESS)

An interconnected collection of BSS and hosts that appear as a single BSS.

Media Access Control (MAC)

A protocol that determines how data is transmitted over a network.

MAC Protocol Data Unit (MPDU)

The unit of data transferred via the physical layer of MAC.

MAC Service Data Unit (MSDU)

The unit-based information delivered between MACs.