WIRELESS NETWORK SECURITY (WIFI) - PART I
Lack of security
Radio electric waves go everywhere and relatively have a wide range. Radio waves are shared equally. They must be thought of as a 3 dimensional figure. It's very difficult to confine these types of wave lengths. And that's why the security of wireless networks should be taken more seriously.
It's very simple for an unauthorized person to gain access to you wireless network. Even from outside the buildings perimeter. A wireless network can also be set up without anyone ever noticing. All it takes is that an employee hooks up an access point to a network plug so that every communication becomes "public".
War driving
War driving is a term used to describe individual who drive around searching for a wireless network connection. You must be equipped with a laptop possessing a wireless network card. Some programs can actually act like a tracking device, it can map out a whole sector of available connections in your district (GPS, Global positioning system)
Established cards show all accessible non secured wireless networks that are open, if you are lucky you might even get an internet connection. A couple of students from London came up with the concepts called "Warchalking". Warchalking is the drawing of hobo like symbols in public places to advertise Wi-Fi wireless networks. Two half circles back to back indicates that there is an open network with access to the Internet. A full circle will indicate that there is a wireless network available without a wire network. The last symbol is a W with a circle around it this indicates a secured wireless network.
Security
Risks
There are multiple risks when you do not secure your
wireless network:
– Masquerading—The attacker impersonates
an authorized user and thereby gains certain
unauthorized privileges.
– Replay—The attacker monitors
transmissions (passive attack) and retransmits
messages as the legitimate user.
– Message modification—The attacker
alters a legitimate message by deleting, adding to,
changing, or reordering it.
– Denial-of-service—The attacker prevents
or prohibits the normal use or management of
communications facilities.
Data Interception
Wireless networks are not a secure form of
communication. This means that access is open to
everyone, or anyone within a specific radius can
intercept any communication along that network.
Usually there is no big danger since most of the
informations is not confidential, unless it's your
personal information (phone number, address, credit
card number....). On the other hand for a company it
is best to strategize when using wireless networks.
Network Intrusion
Stations can access a wire network and eventually the
internet once an access point is installed on a local
network. Only if the local network is linked to the
access point. A non protected wireless network is an
open door for any intruder looking to access vital
information from companies or organizations.
Other than theft, information destruction and free
internet access already present with wireless
networks, these networks can give full access to
hackers who are planning online attacks. Since there
is no way to determine the identity of the culprit,
the person or company who set up the wireless network
can be found responsible for the attack.
Radio interference
Radio waves are very sensitive to interference. This
is why a signal can easily be jammed when near a
radio show with the same or almost the same frequency
as the wireless network being used. Even a microwave
can interfere with the wireless network signal while
in range of an access point.
Denial-of-service
The network access method s=for the 802.11 standard
is based on the CSMA/CA protocol. This protocol
minimizes the likelihood of two devices transmitting
simultaneously. Once the connexion is established the
station must associate itself with an access point
before sending plausible information. When under
attack, the device behaves as if the channel is
always busy, preventing the transmission of any data
over the wireless network. This is what they call a
denial of service when hackers intentionally
interrupt access to a wireless network.
On the other hand other occurrences can happen when
using portable equipment. Denial of service attacks
on batteries are very common. The hacker will use
your wireless network to transmit informations till
your portable equipment (laptops, personal electronic
has no more battery power and becomes useless.
NEXT MONTH: The solutions to protect
wireless networks