Wireless LAN Security



  wlan pdf.pdf (Size: 1.35 MB / Downloads: 113)

Introduction

Network components


Access Point : Bridges wireless client to the wired Ethernet network

STP (spanning tree, IEEE 802.1d) dynamic topology

Broadcast traffic like a hub


Clients or Stations

Two modes


Ad-hoc : direct connection between two WLAN interfaces of stations


Infrastructure : connection between AP and stations

Technology characteristics


Permanently send beacons (control frames) 10 times per second


Identify networks with a SSID (Service Set Identifier)


Encryption with WEP (Wired Equivalent Privacy)


Advantages and benefits of wireless LAN

Installation speed and simplicity


No need to ask anyone


No need to pull cable through walls or add hubs

Reduced Cost of Ownership


Initial hardware and set-up investment similar to wired LAN

Scalability and flexibility


Easy to grow and go everywhere

Mobility and roaming

Crossing obstacles

Temporary networks


Threats with wireless LANs

Unwanted or automatic connection to the wrong network

Theft of user authentication


Man-in-the-middle attack with a fake AP


Airjack

Theft of information by illegal tapping of the network


NetStumbler

Intrusion via the Wireless LANs

Scrambling of the WLAN


Airjack

Consumption of device batteries



WLAN security standards

IEEE 802.11g standard: 54 Mbits/s on 2.4 Ghz


Approved by the working group in February 2003

IEEE 802.11i standard: security in 802.11* networks


Use IEEE 802.1X port access control (April 2001)


CCMP (Counter-Mode/CBC-MAC Protocol)


TKIP (Temporal Key Integrity Protocol)

Dynamic key generation for WEP (Wired Equivalent Privacy)


WRAP (Wireless Robust Authenticated Protocol)


Key management specific to IEEE and replacement of RC4 by AES


Rely on IETF EAP and Radius standards

Synchronisation and coherence need time

Security issues of 802.11b (Wi-Fi) are solved with this new
generation

Security remains a voluntary choice : it must be configured


Segmentation of Wireless LANs

Segment wireless network with a firewall from corporate network

Enforce access control to the wireless network

Authentication of hosts to access the wireless LAN is done by the
network

sir i want seminar report on latest wireless lan security.....
shwetarai2194[at]gmail.com
thank you

Wireless LAN Security Abstract

Wireless local area networks (WLAN) based on the Wi-Fi (Wireless Fidelity) is one of the fastest growing modern standards of technology in enterprises, schools and houses, for obvious reasons. They provide mobile access to the Internet and to corporate networks, so users can stay connected away from your workplace. THESE can be the network up and running quickly when there's no more wired Ethernet infrastructure. They can be made to work with a minimum of effort, not relying on corporate specialized installers.
Some of the business benefits of wireless networks include:
Mobile employees can continuously connected to their applications and key dates;
"New mobile applications based on continuous connection can be deployed;
"Maybe intermittent mobile workers more productive, if they have constant access to e-mail, instant messaging and other applications;
"Impromptu relationship between an arbitrary number of participants was made possible.
"But the presence of these attractive benefits, most of the existing WLAN were not considered safety-related issues effectively.

WLAN threat environments

All computer system makes wireless security threats that may compromised its systems and services. Unlike a wired network, an attacker does not need physical access to the following security risks:
eavesdropping

This includes attacks on confidentiality date that is passed over the network. Your wireless network, eavesdropping is the most significant threat Because the attacker can intercept the transmission of air away from company premises.

fake

An attacker can change the contents of intercepted packets from the wireless network, and this results in a loss of data integrity.

Unauthorized access and tampering

TheZloumyšlennik can get privileged access to the time and resources on the network, assuming the identity of a valid user. This type of attack known as spoofing. To counter this attack, appropriate mechanisms for authentication and access control to a wireless network.

Denial of service

In this attack, the attacker either real or network fills the invalid messages that affect the availability of network resources.TheZloumyšlennik can also flood the radio station thus forcing the STI to use valuable battery power.

Other security threats

Other threats come from weakness in the administration of the network and the vulnerabilities of wireless LAN standards, such as the vulnerability of the Wired Equivalent Privacy (WEP), which is maintained by the IEEE 802.11 standard for wireless networks.



Authentication in 802.11 wireless authentication based on station or device instead of user authentication. The specification provides for two modes of authentication: an authentication and public key authentication. 802.11 authentication process, the client consists of the following operations:

• Client sends a Probe Request frame on each channel

• Access point range is responsible for response model with frame

• The client decides which access point (AP) is the best access and sends the authentication request year

• The access point will send authentication year response

• Successful authentication, the client request frame Association will send to the access point

• Association of Access Point year answer answer

• Client can now send traffic to an access point

To get full information or details of Wireless LAN Security please have a look on the pages


http://studentbank.in/report-Wireless-LAN-Security-ppt

http://studentbank.in/report-wireless-la...?pid=45338

http://studentbank.in/report-Seminar-Rep...#pid128762

http://studentbank.in/report-Wireless-LANs-Security-pdf



if you again feel trouble on Wireless LAN Security please reply in that page and ask specific fields in Wireless LAN Security