The security of near-field communication is also based on the assumption that there aren't any people
around who would want to read your card when this case around means in the radius of up to three centimeters.
The new release of backtrack includes a set of tools for attacking both Bluetooth networks and NFC devices
these tools are capable for example of duplicating proximity cards.
If on a train or bus your car is placed within three centimeters from a device that can read cards an
attacker can use this to duplicate the credentials saved on your card and use them without any control
member that there are no built in security solutions and NFC you can physically control media access
provided that the medium is physical.
You can for example monitor network cables and switches and in this way prevent unauthorized connections
to your wired network.
Security technique is practically impossible with wireless LANs
usually to be able to connect to an access point.
You have to be up to 100 meters away from the AP.
This is dependent upon the used antenna.
The bigger it is the better.
A directional antenna can be used to reach an access point that is 100 kilometers away.
This distance means that a potential intruder can attack your network even from another city or another
country.
Despite this you can logically connect to your business Flann
What can you do to reduce this risk Internet standards organizations puzzled over this problem the 1999
web standard was ratified in that year will come back to that later ratification of what made a lot
of people sighed with relief.
There's a ready privacy solution providing security that is equivalent to that of wired networks.
You can now control media access
this illusion of security was shattered two years later by Peter Shipley at a DEFCON convention.
Shipley started the wardriving trend.
This attack method consisted of searching for Lund's during recreational walk's drives rise or even
flights with a running laptop equipped with a Wi-Fi card.
There used to be geo location maps on the Internet that revealed the presence of Lands Day Internet
access in many countries is practically everywhere and it's often free.
This wasn't the case 15 years ago.
The Def Con lecture also brought positive effects as it highlighted the problem of wireless network
security.
Since we can't control media access we should above all focus on ensuring the confidentiality and authenticity
of data exchanged over wireless networks
diagram in the picture above shows which OSA model layers can be protected with security implementations.
You can remember from previous lectures that the lowest layer that can be efficiently protected is in
that glare.
PCit can be implemented in the third layer IP version 6 has its protocol as a default component.
Unfortunately the layer is too high.
We would have needed to control media access and ensured the authenticity and confidentiality of data.
Even lower.
This is one web protocol and it successor's WPA too and WPA were developed
WPA and WPA two are completely dissimilar technologies and protocols
WPA was introduced because WPA too was too good for its times.
The majority of devices used at the time were incompatible with technology.
To make people move away from WEP WPA was introduced standard is compatible to some extent with what
most older devices that were designed with security in mind could run with WPA but not with WPA to.