Scribd Logo
Upload

Welcome to Scribd!

  • 24 views

    Wireless Security-25 Juni 2008

    Uploaded by

    flipsingadji
    This document discusses security issues related to wireless networks and provides recommendations for prevention. It begins by listing the top 10 wireless attacks, including revealing the SSID, MAC address spoofing, and encryption attacks. Next, it describes how attackers find targets using war chalking, war driving, and common locations. It then lists the tools used for various attacks, such as Netstumbler and Aircrack. Finally, it recommends prevention through people, processes, and technology, including security awareness training, policies, monitoring, and layered protections like encryption, firewalls, and VPNs.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Wireless Security-25 Juni 2008

    Uploaded by

    flipsingadji
    24 views31 pages
    This document discusses security issues related to wireless networks and provides recommendations for prevention. It begins by listing the top 10 wireless attacks, including revealing the SSID, MAC address spoofing, and encryption attacks. Next, it describes how attackers find targets using war chalking, war driving, and common locations. It then lists the tools used for various attacks, such as Netstumbler and Aircrack. Finally, it recommends prevention through people, processes, and technology, including security awareness training, policies, monitoring, and layered protections like encryption, firewalls, and VPNs.

    Original Description:

    SUCURITY

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document discusses security issues related to wireless networks and provides recommendations for prevention. It begins by listing the top 10 wireless attacks, including revealing the SSID, MAC address spoofing, and encryption attacks. Next, it describes how attackers find targets using war chalking, war driving, and common locations. It then lists the tools used for various attacks, such as Netstumbler and Aircrack. Finally, it recommends prevention through people, processes, and technology, including security awareness training, policies, monitoring, and layered protections like encryption, firewalls, and VPNs.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    24 views31 pages

    Wireless Security-25 Juni 2008

    Uploaded by

    flipsingadji
    This document discusses security issues related to wireless networks and provides recommendations for prevention. It begins by listing the top 10 wireless attacks, including revealing the SSID, MAC address spoofing, and encryption attacks. Next, it describes how attackers find targets using war chalking, war driving, and common locations. It then lists the tools used for various attacks, such as Netstumbler and Aircrack. Finally, it recommends prevention through people, processes, and technology, including security awareness training, policies, monitoring, and layered protections like encryption, firewalls, and VPNs.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 31

    Security

    update

    Security
    Wireless
    Yosia Suherman
    ([email protected])

    Professional Service Dept.

    11 Domains of ISO 27001 & 27002

    Why Attacks Are Increasing

    Highlights

    Fact about Wifi ?


    Top 10 Wireless Attack
    How they do that
    Prevention

    Fact about Wifi

    http://www.theregister.co.uk/2005/08/19/finnish_wifi_bank_hack/

    Fact about Wifi

    http://www.securityfocus.com/brief/273

    Fact about Wifi

    Fact about Wifi

    Wifi Deployment
    Shell

    Dcost

    Hotspot Anywhere

    Hotspot Detection

    Top 10 Wireless Attack


    1. Reveal SSID
    2. MAC Address Spoofing
    3. Encryption Attack
    4. Authentication
    5. Eavesdropping
    6. MITM ( Man in The Middle) Attack
    7. Wireless Denial Of Service
    8. Roque Access Point
    9. Client to client Attack
    10. Physical damage or theft

    How

    Find
    Target

    War Chalking
    War Driving

    Tools

    Success

    Find Target
    1. Mall / Shopping Center
    2. Office
    3. Hospital
    4. Internet Public Access
    5. Airport
    6. School / Campus
    7. Hotels

    War Chalking
    Wireless Hotspot Sign Indicator

    War Wardriving
    Wardriving is the act of searching for Wi-Fi wireless
    networks by a person in a moving vehicle using such items
    as a laptop or a PDA.

    Equipment
    Antenna
    Omni

    Bidirectional

    Result

    Tools
    1. Netstumbler/Kismet/KisMac
    2. Mac Changer
    3. Aircrack
    4. AirSnort
    5. Wireshark
    6. Void
    7. Airpawn
    ..etc

    Top 3 Attack
    1. Reveal SSID
    2. MAC Address Spoofing
    3. Encryption Attack
    4. Authentication
    5. Eavesdropping
    6. MITM ( Man in The Middle) Attack
    7. Wireless Denial Of Service
    8. Roque Access Point
    9. Client to client Attack
    10. Physical damage or theft

    Reveal SSID
    Many Access Point use this protection to hide SSID

    To reveal SSID you can use : Kismet or Aircrack

    MAC Spoofing
    Filtering access to the access point allows only those MAC
    addresses specified in the list the ability to access the
    wireless network.

    To bypass this protection you can use : MAC Changer

    Encryption Attack
    Enabling WEP Encrytion for secure data transmission.
    Other encryption WPA, WPA2

    To crack WEP encryption can use : AirCrack

    Others Attack

    1. Reveal SSID
    2. MAC Address Spoofing
    3. Encryption Attack
    4. Authentication
    5. Eavesdropping
    6. MITM ( Man in The Middle) Attack
    7. Wireless Denial Of Service
    8. Roque Access Point
    9. Client to client Attack
    10. Physical damage or theft

    s
    l
    i
    a
    t
    e
    d
    e
    r
    o
    M

    g
    n
    i
    n
    i
    a
    r
    t
    in

    Prevention
    People

    Process
    Technology

    People
     Security Awareness (Seminar, Workshop, Security Update)
     Training for improvement skill

    Process

    Security Policy Enforcement


    Monitoring (log/traffic/signal)
    Regular Audit/Assessment
    ISO 27001

    Technology
    OSI Layer Protection
    Layer 2 (Data Link Layer) :
    WEP
    Tunneling Protocol (L2TP)
    802.1x /EAP

    - Enterprise Encryption Gateways

    Layer 3 :
    Point to Point Tunneling Protocol (PPTP)
    IP Security (IPSec)

    Layer 7 :
    Secure Shell (SSH)
    Secure Shell Version 2 (SSH2)

    Technology
    Client (Mobile Unit)
    Personal Firewall
    VPN
    Antivirus

    Wireless Security Suite

    Q&A

    You might also like