Using 802.11 Wireless Local Area Network

Wireless security in 802.11 is less robust and has many security flaws that can be exploited by an attacker. Security best practice for wireless networks depends on a defense in depth strategy, with five control layers:

Providing safety & security for the device from MAC flooding and Network spoofing by designing and implementing security & safety mechanisms which are essential for Network design.

Outline a wireless network and technology that you use regularly. The WLANs which are derived from the IEEE 802.11 standards, and marketed under the Wi-Fi trademark name. The WLANs security is neither forthright/candid nor simple, and it is continuously varying. Even though, as WLAN increase client output, they also expose the networks to a new group of potential hackers. With the present inherent security weakness of the 802.11 standard, all companies, small, medium or large, need to find out their security conditions derived from the applications using the WLAN. The standards also provide requirements for high-speed networks that support most modern-day applications. What sorts of security issues do

Wireless attacks have becoming a more common security issue when it comes to networks. Attacks can get a lot of information that is being sent across a network and use to commit crimes in other networks. Every wireless network is vulnerable to attacks and it is the important that all the necessary security measures are taken so as to prevent the mess these attacks can cause. These attacks are normally carried out to target information that is being shared through the networks. It is therefore very important to know of such attacks so you will be able to identify the attack when it happens.

In this report I will be describing the ways in which networks can be attacked, also be giving real life example of each of the below.

Where coursework, other than a Master’s dissertation or Master’s project, is handed in late and there are no valid mitigating circumstances, the

We first describe the characteristics of an traffic analysis attacker (with respect to wireless networks) before elaborating on the types of traffic analysis techniques that the attacker can use to compromise privacy.

Guidelines: It’s always best to introduce a paper to the reader. It sets the tone and provides an overview of what will be covered and what the goals are.

Wi-Fi Protected Access 2, the follow on security method to WPA for wireless networks that provides stronger data protection and network access control. It provides enterprise and consumer Wi-Fi users with a high level of assurance that only authorized users can access their wireless networks. Based on the IEEE 802.11i standard, WPA2 provides government grade security by implementing the National Institute of Standards and Technology (NIST) FIPS 140-2 compliant AES encryption algorithm and 802.1x-based authentication.

Denial-of-Service attack (DoS) when a hacker continuously attacks a particular network or dedicated Access Point (AP) with fake requests, failure messages and premature successful connection messages and other commands. These causes authorized users from preventing connecting to the network and results in network failure or crash. These attacks depends on misuse of protocols like Extensible Authentication Protocol (EAP).

The café latte attack relies on a user’s laptop being connected to a Wired Equivalent Privacy (WEP) protected network and tricks the user into sending thousands of WEP-encrypted ARP (Address Resolution Protocol) requests. An ARP is a network protocol that maps together a network layer address and a data link layer hardware address. For example, an ARP is used to resolve IP addresses to their corresponding Ethernet address (Leyden, 2007). For a café latte attack to be successful, the cyber-criminal does not have to be in the same area as the user but can also be in a remote location to intercept the WEP key. A cyber-criminal can take advantage of the message modification flaws in the 802.1WEP architecture and the shared key authentication by flooding a network with encrypted Address Resolution Protocol (ARP) requests. A café latte attack functions by using a bit-flipping technique that modifies the Media Access Control (MAC) address and Internet Protocol address (IP address) of a user’s computer which is collected when gratuitous ARP requests are sent from the cyber-criminal. When the user responds to the gratuitous ARP requests, the cyber-criminal can quickly crack the WEP key from the user’s traffic. With a café latte attack, a cyber-criminal can obtain the WEP key in less

Denial of Service (DoS) attack is a very common cyber menace that renders websites and other online means inaccessible to intended users. There are various types of DoS threats and nearly all directly target the core server structure. Others abuse weaknesses in application and communication proprieties. DoS is also used as a cover-up for other wicked actions, and to take down security applications like web firewalls. A prosperous DoS attack is very obvious and impacts the entire online user base.

Wireless networking hardware requires the use of underlying technology that deals with radio frequencies as well as data transmission. The most widely used standard is 802.11 produced by the Institute of Electrical and Electronic Engineers (IEEE). This is a standard defining all aspects of Radio Frequency Wireless networking

Media Access control address is a permanent/fixed address which is assigned to every hardware device connected to a network (wireless adapter, network interface card etc.) by the hardware manufacturer. Every device on a network has an ip address, IP is an internet protocol which give unique identity to the devices at network layer. IP address can be frequently changed. One the other side, MAC addresses are permanent and they work at layer 2 (data link layer). MAC Address is also known as hardware address or physical address of a device. Changing of MAC address may allow the bypassing of access control list of router/servers by hiding the computer/device on a network or allowing it to deceive another network devices. This is called the spoofing of MAC Address. The media address control spoofing does not mean that we can write the new Mac on the chipset of network interface card but the Mac spoofing is the way to change MAC details of physical configuration of the operating system. Spoofing is used to hiding the original machine which sent the data, this can be done to avoid original machine address or to make it undetectable. For the safety reasons we don’t want to show the original address of the machine which send the data , because hackers ,viruses etc. can target our machines by knowing the original MAC addresses. MAC spoofing is one of the biggest threat for cybercrime investigation agencies, in this today’s world there is no physical evidence where the

Session Initiation Protocol (SIP) is coming the most popular used signaling protocol by the Telephony over IP (ToIP) to open, alter, and terminate a multimedia session among various participants. As result of this popularity SIP become new targets of several attacks. Flooding attack is one of those attacks, which is used to exhaust server’s resources; in this attack a malicious try to flood