Walk them to a course on security threats and Wi-Fi a wireless networks this module will examine and
present some specific instances of threats.
Typical wireless network threat is related to the risk of establishing unauthorized connection to a
shared medium.
As an administrator of a wireless network you can't control access to the network.
Any person who is within the reception range of an access point may be an active user in any given network
as we've said.
This is simply a matter of antenna size
since anyone can connect to a network without authorization.
It follows that anyone can eavesdrop on data transmitted in the network What's more attackers can intercept
the data of other users who share an access point.
This is much like working in a broadcast network with hubs and switches.
Another typical threat is impersonating a trusted user.
Computers are authenticated and Wi-Fi networks against their MAC addresses.
A MAC address is not encrypted.
It is transmitted in clear text using radio waves to add to that all network Current support changing
their MAC addresses.
The risk of deploying a denial of service attack that will block an access point hasn't been a problem
for wired networks or at least not to this degree.
Since the medium is a radio wave it can be interfered or jammed either of the two can be enough to disrupt
the operation of a possibly important enterprise infrastructure
with wireless networks.
You can run your own access point and spoof a trusted AP that was earlier used by clients klank computer
will connect to an access point that produces the strongest signal.
We're back to the antenna size rule.
If your rogue access point will have a bigger antenna it will be used to establish connections within
networks users.
Let's look more closely into this issue.
You should be aware of the possible threats that await you if you use an unknown Wi-Fi network.
Especially if they're public
tackle described now was terrifically popular with intruder's at European and U.S. airports several
years ago.
From a technology standpoint this attack is not a feat of creativity.
It made use of a combination of simple technological solutions and basic social engineering tricks.
A would be attacker launches a fake access point in a crowded place.
For example in an airport terminal to make users connect to the AP the attackers network has the legitimate
looking name.
For example free Wi-Fi airport or Heathrow Airport any in its name will do it could be the name of an
Internet service provider that is popular in a given area.
The attackers aim to scoop as many connections as possible to achieve this.
The rogue access points did not perform user authentication.
It didn't encrypt the transmitted data either.
The networks were open when you connect to an access point an airport or coffee bar or a restaurant
you do it to gain Internet access.
That's why fake access points offered internet access
and the computer connected to an attacker's access point sent data through the attackers device.
Even if an access point connection doesn't allow for changing some client side network configurations
many configurations are performed automatically through an active DHC P.
Let's move away from the risks connected with the possibility that it's an attacker who set a DNS server
used by clients and take a look at a simpler matter.
Users fully expect that once an access point connection is established and the Web site is opening a
page will be displayed from the Wi-Fi provider with a thank you message and a request to submit credit
card details.
As a result of this expectation users will freely in a transparent and unsecured way provide the attacker
with their credit card numbers then send it to the attacker server.
If this trick is to be pulled off a fake Web site has to look trustworthy
it should look similar to other pages from a legitimate internet providers.
There's a ton of tools on the Internet that can help you download an entire web page to your computer's
local disk.
You can also download a logging page.
It's not a problem anymore to set up a page that looks identical to any other page.
I'd highly recommend to be cautious with using Free Public Wi-Fi networks.
Especially if a logging window appears with a request to submit any sensitive data especially credit
card details.
This idea for attacks was subsequently developed and improved on.