Wireless Network Security Presented by: Prabhakaran Theertharaman

Presentation Plan  An overview of wireless technology.  Benefits, Security risk, Mitigation for WLAN technology WLAN technology Bluetooth ad hoc network technologyBluetooth ad hoc network technology Handheld wireless devicesHandheld wireless devices

Wireless Technology  Enables one or more devices to communicate without physical connections  Does not require network or peripheral cabling   Receive and transmit information using electromagnetic (EM) waves.  Ranges from Radio Frequency [RF] to Infrared frequency [IR] for transmitting data   Extends from 9 kilohertz (kHz) to thousands of gigahertz (GHz)

Wireless Networks  Wireless Wide Area Networks (WWAN) Wider CoverageWider Coverage Example:Example:  2G Cellular  Cellular Digital Packet Data (CDPD)  Global System for Mobile Communications (GSM)  Mobitex  Wireless Local Area Networks (WLAN) Smaller NetworksSmaller Networks Example:Example:   HiperLAN  Wireless Personal Area Network (WPAN) Ad hoc Networks*Ad hoc Networks* Example:Example:  Bluetooth  Infrared (IR)

Threats and vulnerabilities of wireless systems  Vulnerabilities that exist in a wired network apply to wireless technologies too.  Malicious entities may gain unauthorized accessgain unauthorized access intercept and discloseintercept and disclose Denial of service (DoS)Denial of service (DoS) MasqueradeMasquerade deploy unauthorized equipmentdeploy unauthorized equipment use un-trusted wireless network servicesuse un-trusted wireless network services  Sensitive data may be corrupted during improper synchronization.  Handheld devices are easily stolen and can reveal sensitive information

Wireless attacks Attacks Passive EavesdroppingTraffic Analysis Active MasqueradeReplay Message Modification Denial of Service

General Wireless Security Requirements  Authenticity - A third party must be able to verify that the content of a message has not been changed in transit.  Non-Repudiation - The origin or the receipt of a specific message must be verifiable by a third party.  Accountability - The actions of an entity must be traceable uniquely to that entity.

Wireless Local Area Network a.k.a., WiFi, WLAN

Wireless LAN - Benefits  User Mobility  Rapid Installation  Flexibility  Scalability

Security features of WiFi  Authentication Only authorized persons allowed to gain access to my network.  Confidentiality Intended to prevent information compromise from casual eavesdropping (passive attack)  Integrity Ensures that messages are not modified in transit between the wireless clients and the access point in an active attack.

WEP  WLANs security services are provided by Wired Equivalent Privacy (WEP) protocol.  WEP protects link-level data during wireless transmission between clients and access points.  WEP does not provide end-to-end security (just the wireless portion of the network)

Risk Mitigation  Management Countermeasures  Operational Countermeasures Physical securityPhysical security  Technical Countermeasures Software Solutions Hardware Solutions

Technical Countermeasures  Software Solutions 1. Access Point Configuration Updating default passwords Establishing proper encryption settings Controlling the reset function Using MAC ACL functionality Changing the SSID Maximize the Beacon Interval Disable broadcast SSID feature Changing default cryptographic keys Using SNMP Changing default channel Using DHCP – Dynamic Host Control Protocol

Software Solutions Access Point Configuration 2. Software Patches and Upgrades 3. Authentication 4. Personal Firewalls 5. Intrusion Detection System (IDS) 6. Encryption 7. Security Assessments

Hardware Solutions Smart CardsSmart Cards Virtual Private NetworksVirtual Private Networks Public Key Infrastructure (PKI)Public Key Infrastructure (PKI) BiometricsBiometrics

Wireless PAN – Bluetooth Technology

Bluetooth Technology Bluetooth is a standard that will Eliminate wires and cables between both stationary and mobile devicesEliminate wires and cables between both stationary and mobile devices Facilitate both data and voice communicationsFacilitate both data and voice communications Offer the possibility of ad hoc networks and deliver synchronicity between personal devicesOffer the possibility of ad hoc networks and deliver synchronicity between personal devices

Benefits  Cable replacement  Ease of file sharing  Wireless synchronization  Automated wireless applications  Internet connectivity

Bluetooth Security modes Security Modes Security Mode 1 No security Security Mode 2 Service Level Security Flexible / Policy based AuthenticationConfidentialityAuthorization Security Mode 3 Link Level Security Fixed AuthenticationConfidentiality

Security Requirements for Risks  Loss of Confidentiality  Loss of Integrity  Loss of Availability

Risk Mitigation  Software Solutions - Bluetooth PIN - Bluetooth PIN  Hardware Solutions - Device Address - Device Address - Frequency-Hopping Schemes - Frequency-Hopping Schemes - Trusted Third Party (TTP) Authentication - Trusted Third Party (TTP) Authentication

Wireless Hand Held Devices Personal Digital Assistants (PDA) & Smart Phones

Security Requirements  Loss of Confidentiality  Loss of Integrity  Loss of Availability

Risk Mitigation  Authentication  Encryption  Antivirus Software  PKI  VPN and Firewalls  Enterprise Solutions

Questions ?

Thank You