Hardware Information |
Security Risks and Ways to Decrease Vulnerabilities in a 802.11b Wireless Environment
Introduction This document explains topics relating to wireless networks. The main topics discussed include, what type of vulnerabilities exist today in 802.11 networks and ways that you can help prevent these vulnerabilities from happening. Wireless networks have not been around for many years. Federal Express has been using a type of wireless networks, common to the 802.11 networks used today, but the general public has recently just started to use wireless networking technology. Because of weak security that exists in wireless networks, companies such as Best Buy have decided to postpone the roll-out of wireless technology. The United States Government has done likewise and is suspending the use of wireless until a more universal, secure solution is available. Background What is Wireless? Wireless LANs or Wi-Fi is a technology used to connect computers and devices together. Wireless LANs give persons more mobility and flexibility by allowing workers to stay connected to the Internet and to the network as they roam from one coverage area to another. This increases efficiency by allowing data to be entered and accessed on site. Besides being very simple to install, WLANs are easy to understand and use. With few exceptions, everything to do with wired LANs applies to wireless LANs. They function like, and are commonly connected to, wired Ethernet networks. The Wireless Ethernet Compatibility Alliance [WECA] is the industry organization that certifies 802.11 products that are deemed to meet a base standard of interoperability. The first family of products to be certified by WECA is that based on the 802.11b standard. This set of products is what we will be studying. Also more standards exist such as 802.11a and 802.11g. The original 802.11 standard was published in 1999 and provides for data rates at up to 2 Mbps at 2.4 GHz, using either FHSS or DSSS. Since that time many task groups have been formed to create supplements and enhancements to the original 802.11 standard. The 802.11b TG created a supplement to the original 802.11 standard, called 802.11b, which has become the industry standard for WLANs. It uses DSSS and provides data rates up to 11 Mbps at 2.4 Ghz. 802.11b will eventually be replaced by standards which have better QoS features, and better security. Network Topology There are two main topologies in wireless networks which can be configured: Peer-to-peer (ad hoc mode) - This configuration is identical to its wired counterpart, except without the wires. Two or more devices can talk to each other without an AP. Client/Server (infrastructure networking) - This configuration is identical to its wired counterpart, except without the wires. This is the most common wireless network used today, and what most of the concepts in this paper apply to. Benefits of Wireless LANs
Wireless LANs give you more mobility and flexibility by allowing you to stay connected to the Internet and to the network as you roam. Cons of Wireless LANs Wireless LANs are a relatively new technology which has only been around since 1999. With any new technology, standards are always improving, but in the beginning are unreliable and insecure. Wired networks send traffic over a dedicated line that is physically private; WLANs send their traffic over shared space, airwaves. This introduces interference from other traffic and the need for additional security. Besides interference from other wireless LAN devices, the 2.4 GHz is also used by cordless phones and microwaves. Security Issues of WLANs
Eavesdropping & Espionage Because wireless communication is broadcast over radio waves, eavesdroppers who just listen over the airwaves can easily pick up unencrypted messages. These intruders put businesses at risk of exposing sensitive information to corporate espionage. Wireless LAN Security - What Hackers Know That You Don't www.airdefense.net Copyright 2002 Internal Vulnerabilities Within an organization network security can be compromised by ways such as, Rouge WLANs (or Rouge Aps), Insecure Network Configuration, and Accidental Associations to name a few. Rouge Access Points - An employee of an organization might hook up an access point without the permission or even knowledge of IT. This is simple to do, all a person has to do is plug an Access point or wireless router into an existing live LAN jack and they are on the network. One statistic in 2001 by Gartner said that, "at least 20 percent of enterprises already have rouge access points." Another type of attack would be if, someone from outside the organization, enters into the workplace and adds an Access Point by means of Social Engineering. Insecure Network Configurations- Many companies think that if they are using a firewall or a technology such as VPN, they are automatically secure. This is not necessarily true because all security holes, big and small, can be exploited. Also if devices and technologies, such as VPNs, firewalls or routers, are mis-configured, the network can be compromised. Accidental Associations - This can happen if a wireless network is setup using the same SSID as your network and within range of your wireless device. You may accidentally associate with their network without your knowledge. Connecting to another wireless LAN can divulge passwords or sensitive document to anyone on the neighboring network. Wireless LAN Security - What Hackers Know That You Don't www.airdefense.net Copyright 2002 Social Engineering - Social Engineering is one of the most effective and scariest types of attacks that can be done. This type of attack really scares me and can be done for many other purposes besides compromising security in wireless networks. A scenario: Someone dressed up as a support person from Cisco enters the workplace. The secretary sees his fake credentials and lets him get pass the front desk. The impersonator walks from cubicle to cubicle, collecting user names and passwords as he/she goes. After finding a hidden corner, which seems to be lightly traveled, he plugs an insecure Access Point into the network. At the same time he configures the Access Point to not broadcast its SSID and modifies a few other settings to make it hard for the IT department to find this Rouge Access Point. He then leaves without ever being questioned by anyone because it looks like he just fits in. Now, all he has to do is be within 300 feet from the access point, (more if he added an antenna), and now has access to all kinds of secure documents and data. This can be a devastating blow to any corporation and could eventually lead to bankruptcy if the secrets of the company were revealed to competitors. Bruce Schneier came to my classroom and said the following about Social Engineering, "Someone is just trying to do their job, and be nice. Someone takes advantage of that by targeting this human nature. Social Engineering is unsolvable." Securing Wireless Networks According to Bruce Schneier and others such as Kevin Mitnick, you can never have a totally secure computing environment. What is often suggested is to try and control the damage which can be done if security is breached. One can try many different tools on the market which can help prevent security breaches. WEP - WEP supports both 64 and 128-bit keys. Both are vulnerable, however, because the initialization vector is only 24-bits long in each case. Its RC4 algorithm, which is used securely in other implementations, such as SSL, is quite vulnerable in WEP. Http://www.infosecuritymag.com/2002/jan/cover.shtml Wireless Insecurities By Dale Gardner. Different tools exist to break WEP keys, including AirSnort, which can be found at www.airsnort.net. Although this method is not a secure solution, it can be used to help slowdown an attacker if other means are not possible financially or otherwise. VPN and IPSec- IPSec VPNs let companies connect remote offices or wireless connections using the public Internet rather than expensive leased lines or a managed data service. Encryption and authentication systems protect the data as it crosses the public network, so companies don't have to sacrifice data privacy and integrity for lower costs. A lot of VPN's exist on the market today. An important note about VPNs is, interoperability does not really exist, and whatever you use for your server has to be the same brand as your clients most of the time. Some VPNs include:
DMZ - Adding this to your network enables you to put your wireless network on an untrusted segment of your network. Firewalls - Firewalls are all over the place. Firewalls range from hardware to software versions. By adding a firewall between the wireless network and wired network helps prevent hackers from accessing your wired network. This paper doesn't go into specifics about different firewalls and how to set them up, but there are many. Some of the firewalls include:
PKI - Public-key infrastructure (PKI) is the combination of software, encryption technologies, and services that enables enterprises to protect the security of their communications and business transactions on the Internet. What is PKI? http://verisign.netscape.com/security/pki/understanding.html Site Surveys - Site Surveys involve using a software package and a wireless device to probe your network for Access Points and security risks. Proactive Approaches Since wireless technology is insecure, companies or anyone can take a proactive approach to try and identify hackers trying to gain access via wireless networks. Honeypots - are fake networks setup to try and lure in hackers. This enables administrators to find out more about what type of techniques hackers are using to gain access. One product is Mantrap created by Symantec. "ManTrap has the unique ability to detect both host- and network-based attacks, providing hybrid detection in a single solution. No matter how an internal or external attacker tries to compromise the system, Symantec ManTrap's decoy sensors will deliver holistic detection and response and provide detailed information through its system of data collection modules." http://enterprisesecurity.symantec.com/products/products.cfm?ProductID=157 Intrusion Detection - Intrusion Detection is software that monitors traffic on the network. It sounds out a warning if a hacker it trying to access the network. One such free product is Snort. "Before we proceed, there are a few basic concepts you should understand about Snort. There are three main modes in which Snort can be configured: sniffer, packet logger, and network intrusion detection system. Sniffer mode simply reads the packets off of the network and displays them for you in a continuous stream on the console. Packet logger mode logs the packets to the disk. Network intrusion detection mode is the most complex and configurable configuration, allowing Snort to analyze network traffic for matches against a user defined rule set and perform several actions based upon what it sees." http://www.snort.org/docs/writing_rules/chap1.html#tth_chAp1 Network Monitoring- Network Monitoring would be products such as snort that monitor the flow of traffic over the network. Quick tips and tricks
About The Author Richard J Johnson Network+ Certified RJ Computer Consulting http://rjcomputerconsulting.com Richard@johnsorichard.com
MORE RESOURCES: Unable to open RSS Feed $XMLfilename with error HTTP ERROR: 404, exiting |
RELATED ARTICLES
Building A PC Many people simply go to the retail store and get sold to when it comes to computing equipment. You would be very surprised how easily you can pick up all the core components and assemble yourself or get a friend or family member in the know to do it for you. At War With The Internet When it comes to sales of technology products over the Internet, there are now two factors that potential buyers must consider as possibly 'too good to be true'. In the past, there was only price to worry about. Can I Use My Old Ink With My New Printer? The quick answer is.. How To Choose The Best Student Laptop? How To Choose the Best Student Laptop?Merchants are singing those three magic words again,'Back to School' and the fallout is everywhere!Just as you're getting your deep dark pre-cancerous tangoing -- you hear those words -- and it spells the end of summer. Once again we are bombarded with advertising,featuring the latest in 'teen ware' 'school ware' and'metal detector ware'. ESR Meter - The Capabilities To Check Beyond Electrolytic Capacitor There is something good about esr meter because besides electrolytic capacitor it can be use to measure other type of capacitors such as the non polarity capacitor. From esr meter specification, it is usually mentioned only checking the electrolytic type. Testing a Transformer- How To Accurately Test A Transformer There is two types of transformers in the market- linear transformer and switch mode power transformer. The transformers design is different. Batteries for Your Laptop With technology advancing more every day, electronics have become smaller and more mobile. This includes computers. How To Buy A Printer That Won't Break The Bank OK I confess I've bought at least 10 inkjet printers in the last 5 years and finally found one that I really like. I'm not going to mention the brand here but I will tell you what the must have features are for me. How to Check Your IP So you need to check your IP address, for whatever reason. Maybe you're playing an online game with a friend, or you need to access your PC remotely. Computer Cooling Hardware PC cooling systems are one of the hottest - and coolest - computer hardware accessories avaliable. Most computers, however, still do not come with a cooling system more advanced than the typical heat sink and cpu fan. Refurbished Laptops are the Real Deal! Laptop computers have found usefulness as portable media devices.Even refurbished laptops can be used as DVD players, stereos, and recording devices. How to Purchase a Flat Panel TV When purchasing a flat panel TV, there are a few things to keep in mind. Here, we've listed a number of considerations for you to evaluate. Buying / Selecting Computer Components This is the step takes the most time and consideration. Which parts do I buy? Which are best?There are many good places to buy computer parts. Special Events Recording in DVD Players Age The proliferation of portable DVD players has dramatically changed the videography approach.Digital era prompted people to make critical choices. Buying a Refurbished Dell Laptop Dell offers a full line of refurbished laptops on their website, dell.com. Does Size Really Matter In Our Digital Age? Well, we've all seen the advert, but that's not what I want to talk about, so get that out of your head straight away. No, let's think about what many call the "Queen of Arts" - namely painting. 3 Easy Step To Locate A Real Bargain On Laptop Batteries Looking for a real bargain on laptop batteries? How do I know the batteries are running good as advertised? Which merchants are offering quality rechargeable cells? Where can I get the bargain? Where to buy?Many of you have some of these questions? Certainly!!. We surely want to saving our hard to earn $$ and only buy quality cells. Rear Projection TV Facts - Understanding the Pros & Cons of Rear Projection in the Home Theater Rear Projection Television - An Affordable OptionA great deal of consumer appeal for Rear Projection TV systems arise out of the shear simplicity that this product offers as an immediate solution to getting a bigger TV.No mess, no fuss, if you have the space, either visit your local big screen retailer - or better still, check at your favorite online electronics superstore - to order your product and get it delivered in just a few days; unpack the product and there you have a big screen TV in your living room ready for immediate use!Rear Projection TV Facts:As already stated, rear projection offers a most immediate solution to getting a bigger TV. Whats In An LCD Display? Who needs an LCD display? Well, if you're like me, having one huge hunk of a monitor sitting on your desktop is just not feasible. Not only does it take up desk space, but there's just simply no need for all of the physical mass, right?Welcome LCD displays-the computer monitors of the present and future. Discover Everything About Wholesale Bar Code Reader And Software! It is a given fact that buying wholesale would make us save more money than buying individual items at retail. Purchasing in bulk means more profit for the seller that he could be afforded the leeway of granting discounts. |
home | site map | Contact Us |