Ch. 10 Wireless Network Attacks and Defenses

Celluilar networks

operated by telecommunication service providers and are the most widespread wireless networks

Bluetooth

wireless technology that uses short-range radio frequency (RF) transmissions for communications over short distances

bluejacking

an attack that sends unsolicited messages to bluetooth-enabled devices

bluesnarfing

attack that accesses unauthorized information from a wireless device through a bluetooth connection

Near field communication (NFC)

set of standards used to establish communication between devices in close proximity

eavesdropping

uncrypted NFC communication between the device qand terminal can be intercepted and viewed

data theft

attackers can “bump” a portable reader to a user’s smartphone in a crowd to make an NFC connection and steal payment information stored on the phone

Man-in-the-middle attack

an attacker can intercept the NFC communications between devices and force a ficticious response

device theft

the theft of a smartphone could allow an attacker to use that phone for purchases

radio frequency indentification (RFID)

commonly used to transmit info between employee identification badges, inventory tags, book lavels, and other paper-based tags that can be detected by a proximy reader

wireless afdapter

a wireless client network interface card

access point (AP)

centrally located WLAN connection device that can send and receive wireless signals to and from clients.

Controller APs

can be managed through a dedicated wirelessLAN controller

captive portal AP

uses a standard web browser to provide information and allows the user to agree to a policy or present valid login credentials

rogue AP

unauthorized access point that allows an attacker to bypass network security configurations

evil twin

AP set up by an attacker

RF jamming

occurs when attackers use intentional RF interference to flood the RF spectrum with enough interference to prevent a device from communicating with the AP

disassociation attack

an attacker can create false deauthentication or disassociation management that appear to come from another device causing the client to disconnect from the AP

wired equivalent privacy (WEP)

IEEE 802.11 security protocol designed to ensure that only authorized parties can view transmissions

Wi-Fi Protected Setup (WPS)

A network security standard that allows users to easily secure a wireless network by connecting devices using a PIN or push-button method.

media access control (MAC)

address filtering is the most common method for controlling access to a wireless network, allowing devices with specified MAC addresses to connect.

Wi-Fi Protected Access (WPA)

A security protocol designed to provide stronger data protection and network access control for wireless networks, succeeding WEP and providing improvements such as TKIP and AES encryption methods.

Counter Mode with Cipher Blocl Chaining Message Authentication Code Protocol (CCMP)

A security protocol that provides data confidentiality and integrity for wireless networks, using AES encryption in Counter Mode with a Message Authentication Code.

Extensible Authenticastion Protocol (EAP)

framework for transporting authentication protocol

-EAP defines message format and uses four types of packets: request, Response, Success, Failure

EAP-TLS

uses digital certificates for authentication

EAP-TTLS

security tunnels client password authentication within Transport Layer Security (TLS) records

EAP-FAST

Security tunnels any credential form for authentication (such as a password or a token) using TLS