WIRELESS NETWORK SECURITY (WIFI) - PART I

PART I : Security risks and breaches surrounding WIFI networks

Lack of security

Radio electric waves go everywhere and relatively have a wide range. Radio waves are shared equally. They must be thought of as a 3 dimensional figure. It's very difficult to confine these types of wave lengths. And that's why the security of wireless networks should be taken more seriously.

It's very simple for an unauthorized person to gain access to you wireless network. Even from outside the buildings perimeter. A wireless network can also be set up without anyone ever noticing. All it takes is that an employee hooks up an access point to a network plug so that every communication becomes "public".

War driving
War driving is a term used to describe individual who drive around searching for a wireless network connection. You must be equipped with a laptop possessing a wireless network card. Some programs can actually act like a tracking device, it can map out a whole sector of available connections in your district (GPS, Global positioning system)

Established cards show all accessible non secured wireless networks that are open, if you are lucky you might even get an internet connection. A couple of students from London came up with the concepts called "Warchalking". Warchalking is the drawing of hobo like symbols in public places to advertise Wi-Fi wireless networks. Two half circles back to back indicates that there is an open network with access to the Internet. A full circle will indicate that there is a wireless network available without a wire network. The last symbol is a W with a circle around it this indicates a secured wireless network.

180px-Warchalking

Security Risks
There are multiple risks when you do not secure your wireless network:
– Masquerading—The attacker impersonates an authorized user and thereby gains certain
unauthorized privileges.
– Replay—The attacker monitors transmissions (passive attack) and retransmits messages as the legitimate user.
– Message modification—The attacker alters a legitimate message by deleting, adding to,
changing, or reordering it.
– Denial-of-service—The attacker prevents or prohibits the normal use or management of
communications facilities.


Data Interception
Wireless networks are not a secure form of communication. This means that access is open to everyone, or anyone within a specific radius can intercept any communication along that network. Usually there is no big danger since most of the informations is not confidential, unless it's your personal information (phone number, address, credit card number....). On the other hand for a company it is best to strategize when using wireless networks.

Network Intrusion
Stations can access a wire network and eventually the internet once an access point is installed on a local network. Only if the local network is linked to the access point. A non protected wireless network is an open door for any intruder looking to access vital information from companies or organizations.

Other than theft, information destruction and free internet access already present with wireless networks, these networks can give full access to hackers who are planning online attacks. Since there is no way to determine the identity of the culprit, the person or company who set up the wireless network can be found responsible for the attack.

Radio interference
Radio waves are very sensitive to interference. This is why a signal can easily be jammed when near a radio show with the same or almost the same frequency as the wireless network being used. Even a microwave can interfere with the wireless network signal while in range of an access point.

Denial-of-service
The network access method s=for the 802.11 standard is based on the CSMA/CA protocol. This protocol minimizes the likelihood of two devices transmitting simultaneously. Once the connexion is established the station must associate itself with an access point before sending plausible information. When under
attack, the device behaves as if the channel is always busy, preventing the transmission of any data over the wireless network. This is what they call a denial of service when hackers intentionally interrupt access to a wireless network.

On the other hand other occurrences can happen when using portable equipment. Denial of service attacks on batteries are very common. The hacker will use your wireless network to transmit informations till your portable equipment (laptops, personal electronic has no more battery power and becomes useless.

NEXT MONTH: The solutions to protect wireless networks