1. WLAN Security Issues, technologies, and alternative solutions Hosam M. Badreldin Western Illinois University December 2011 Hosam Badreldin – Fall 2011

2. Why Network Security? Confidentiality – protected from attackers Integrity – information was not compromised Availability – unauthorized access /DoS 2Hosam Badreldin – Fall 2011

3. Security issues/problems Rogue Access Points Denial of Service Eavesdropping MAN-in-the-Middle War Driving Signal Jamming 3Hosam Badreldin – Fall 2011

4. Security technologies 1- SSID Passive scan 2- Mac Address authentication Spoofing 1- Wired Equivalent Privacy (WEP) Manual Key Management Initialization vector Encryption WEP key is combined with a 24-bit IV to create the key 2- Wi-Fi Protected Access (WPA) Enhancement for WEP (48-bit IV) TKIP: Temporal Key Encryption Protocol (Key per pkt) PSK/802.1x authentication Hosam Badreldin – Fall 20114

5. Alternative solutions IEEE 802.1x Availability VPN Confidentiality/Integrity Cisco LEAP (Light Weight Authentication Protocol) Availability SSL (Secure Socket Layer) Confidentiality/Integrity 5Hosam Badreldin – Fall 2011

6. Questions & Comments Hosam Badreldin - Fall 2011