Chapter 5: Protecting Wireless Networks

Question 1

802.11<i>x</i> Protocols

170

Answer 1

802. 11- 1 or 2 Mbps at 2.4 GHz
803. 11a- 54 Mbps at 5 GHz
804. 11b- 11 Mbps at 2.4 GHz
805. 11g- 54 Mbps at 2.4 GHz
806. 11i- security updates, particularly to authentication
807. 11n- up to 600 Mbps at 5 and 2.4 GHz
     * 802.11ac- up to 1 Gbps at 5 GHz
     * 802.11ad- up to 7Gbps at 60 GHz
     * **The 60 GHz band is also more secure due to a smaller radius of signal propagation

Question 2

Wired Equivalent Privacy (WEP)

171

Answer 2

Legacy wireless security that can be cracked in 5 minutes. TKIP was introduced to make it much more secure, but that has long since been broken.

Question 3

Wireless Application Protocol (WAP)

172

Answer 3

used for ancient wireless devices. Uses WML for webpage display.
Sometimes the connection between the WAP server and the internet wasn’t encrypted, which created security risks.

Question 4

Wi-Fi Protected Access (WPA)

172

Answer 4

Created to implement the 802.11i standard. WPA2 takes care of all of it, while WPA only lives up to some of it.
WPA uses TKIP, and WPA2 uses CCMP

Question 5

Wireless Transport Layer Security (WTLS)

173

Answer 5

Security for WAP.

Similar to TLS, but considerably less powerful.

Question 6

Security levels in WAP

174

Answer 6

<b>A</b>nonymous authentication
-Anyone can connect to the web portal
<b>S</b>erver Authentication
-You must authenticate against a server
<b>T</b>wo-way (client server) authentication
-The server must authenticate with the client must authenticate with the server.

Question 7

Technologies used to communicate between WAP device and server
175

Answer 7

<b>W</b>ireless Session Protocol (WSP)
-Session information and connection
<b>W</b>ireless Transaction Protocol (WTP)
-Similar in function to TCP and UDP
<b>W</b>ireless Datagram Protocol (WDP)
-Common interface between devices

Question 8

Captive Portals

180

Answer 8

When you have to agree to terms and conditions in order to access the internet. An example of this would be at Starbucks.

Question 9

Extensible Authentication Protocol

181

Answer 9

Framework of authentication for wireless networks.
The important ones are LEAP and PEAP.
It’s used for WPS, which is terrible.

Question 10

Lightweight EAP

182

Answer 10

LEAP is Cisco proprietary and is being phased out. It requires mutual authentication, but it’s susceptible to dictionary attacks.

Question 11

Protected EAP

182

Answer 11

PEAP was developed by Cisco, RSA, and Microsoft. It has native support in Windows (starting with XP), and has replaced all former versions of EAP.

Question 12

Site Survey

185

Answer 12

You listen to a wireless network and you can see information about the network, including what systems are in use and which protocols they’re using.

Question 13

War Driving

185

Answer 13

Driving around in search of wireless access points that are either unrestricted or easily hacked.

Question 14

War Chalking

185

Answer 14

Writing on a wall, on the street, on a sign, etc. information about a wireless access point you’ve jumped on to

Question 15

Blue Jacking

187

Answer 15

Spam over Bluetooth. It’s annoying, but mostly harmless.

Question 16

Blue Snarfing

187

Answer 16

Hacking the device running Bluetooth to access files, wreak havoc, or whatever.