Attacks and defense strategies in a wireless local area network Course: CSCI5235 Instructor: Dr. Andrew T. Yang Student: Fan Yang

Agenda What is wireless local area network? Wireless security Threats or attacks in wireless local area network Defense strategies References

Wireless Local Area Network

IEEE is a set of standards for wireless local area network (WLAN) computer communication, developed by the IEEE LAN/MAN Standards Committee (IEEE 802) in the 5 GHz and 2.4 GHz public spectrum bands.

Wireless Security In December 2004, a class of 100 undergraduates worked to map the city of Seattle, Washington over several weeks. They found 5,225 access points; 44% were secured with WEP encryption, 52% were open, and 3% were pay-for-access. [4]

Possible threats or attacks in wireless local area network Observations on Packets Captured Rogue Access Points Spoofing Denial of Service (DoS) Attacks Man-In-The-Middle Attacks Weakness of WEP

Wired Equivalent Privacy (WEP) WEP RC4 64 bit 128 bit more secure (bit slower speed) Pass phrase Wireless signals are easy to intercept and WEP security is fairly simple to crack given the right tools. AirSnort, WEPCrack, AirCrack.

Weakness of WEP

Man-In-The-Middle Attacks

Defense strategies Wi-Fi Protected Access (WPA and WPA2) Against Spoofing Against Flooding attack Against Eavesdropping Against DoS attack Virtual Private Networks (VPN)

WPA and WPA2 The recommended solution to WEP security problems is to switch to WPA2 or the less resource intensive WPA. One major improvement in the protocol over WEP is the Temporal Key Integrity Protocol (TKIP), which dynamically changes keys as the system is used. When combined with the much larger initialization vector, this provides greatly improved protection against the well-known key recovery attacks on WEP. RADIUS authentication

References 1) 2) Lawan A. Mohammed and Biju Issac, “DoS Attacks and Defense Mechanisms in Wireless Networks”, Mobile Technology, Applications and Systems, nd International Conference on Nov Page(s):8 pp. 3) Bradley Morgan, “Wireless Security Attacks and Defenses”, White paper, Available online: reless-Security-Attacks-Defenses.html reless-Security-Attacks-Defenses.html 4) Dan Schade, “Wireless Attacks and Defense”, Available online: df/Wireless_Attacks_DSchade.pdf df/Wireless_Attacks_DSchade.pdf