1. Wireless & password security Mark Theeuwes

2. 2 Wireless basics

3. 3 l Radio waves

4. 4 Wireless basics l Channels 2,4 GHz (802.11 B/G/N)

5. 5 Wireless basics l Channels 5GHz (802.11 A/N)

6. 6 Wireless basics l Reflection l Absorbtion l Refraction l Scattering

7. 7 Wireless basics l Omnidirectional antenna

8. 8 Wireless basics l Other Antenna’s

9. 9 Wireless basics l WLAN Cell

10. 10 Wireless basics l Range

11. 11 Wireless basics l Roaming

12. 12 Wireless basics l Roaming

13. 13 Wireless basics l Cells

14. 14 Wireless basics l Honey cone

15. 15 Wireless basics l Building

16. 16 Wireless basics l Autonomous Accespoint

17. 17 CiscoWireless l LWAP

18. 18 Cisco Wireless

19. 19 Wireless

20. 20 Wireless basics l Association

21. 21 Wireless basics l Security options

22. 22 Wireless attacks

23. 23 Wireless attacks

24. 24 WEP cracking

25. 25 WPA2 cracking

26. 26 Passwords

27. 27 Strong passwords

28. 28 Passwords password 2Mypassword 2MyPa$$w0rd! 1Ef$aŎX9s2!#

29. 29 Password policy considerations l What is too simple ? l Password age ? l Password length ?

30. 30 Passwords

31. 31 Strong passwords

32. 32 Myspace attack 2006 (34.000 passwords)

33. 33 Myspace attack 2006

34. 34 Most common passwords (America) l password1, abc123, myspace1, password, blink182, qwerty1, fuckyou, 123abc, baseball1, football1, 123456, soccer, monkey1, liverpool1, princess1, jordan23, slipknot1, superman1, iloveyou1, monkey

35. 35 Password hashes

36. 36 Password hashes

37. 37 Password hacking

38. 38 Password guessing l The word "password" l The same as the user name l Name of the user l Birthdays or birth places l Relatives l Pets l Favorite colors, foods, places, etc.

39. 39 Dictionary attacks

40. 40 Brute force

41. 41 Rainbow tables l NTLM hashes

42. 42 Password database Fontys Venlo (10 years ago)

43. 43 Future ?

44. 44 Security is a trade off

45. 45 Questions

46. 46