Wireless Hacking & Wireless Security

[Nytro]

Wireless Hacking & Wireless Security

About Author: Suman Sah is a Electronics and Communication Engineer of

PCET(PTU) , Having 1 year experience in the field of Wireless/GSM hacking and

security.

Wireless networking brings a whole new meaning to networking security risk analysis and mitigation. With

readily available equipment, attacks on wireless networks have never been so easy. Network administrators,

uncomfortable with the state of wireless LAN security, have turned to more traditional methods to secure their

wireless networks. Often, they will use IPSec, which operates on the network layer, to provide the required

security.

Unfortunately, network layer security solutions such as IPSec do not address all of the security concerns that

arise from the shared airwaves. In addition, the "per-tunnel" licensing of commercial IPSec solutions makes the

network layer solution somewhat costly, and adds to the management headaches inherent in network layer

solutions. Since network layer security is not a complete solution for wireless networks, standards bodies such

as the IEEE have focused on 802.11, a protocol that provides security at the link layer. Link layer security can

protect a wireless network by denying access to the network itself before a user is successfully authenticated.

This prevents attacks against the network infrastructure and protects the network from attacks that rely on

having IP connectivity. Wi-Fi Protected Access, a link layer solution, was designed specifically for wireless

networks and is particularly well suited for wireless security.

This paper examines network layer security provided by IPSec and link layer security provided by WPA,

addressing the characteristics of each approach when applied to wireless networks. It focuses on the

shortcomings of IPSec when applied to wireless networking security concerns, and it demonstrates how WPA

provides a more desirable wireless network security solution for most applications.

Download:

http://www.exploit-db.com/download_pdf/17916