Trusting the Wireless Network: Understanding Wireless Threats and How to Defend Against Them

No ratings

Presented at AusCERT 2014 by

Mark Krischer

The proliferation of mobile devices and the rise of BYOD has raised the profile of the Enterprise Wireless Network, and at the same time created new attack vectors increasing the risks associated with them. In this session we will explore a wide range of threats associated with wireless networks including both passive and active attacks such as Firesheep, Cafe Latte, Aircrack-NG, Hole 196, Reaver WPS, WPA2 Enterprise MiTM and MDK3 Secret Destruction Mode. This will include a review of how these attacks work in relation to the 802.11 and Wi-Fi Alliance standards, including topics around WPA2 Personal and Enterprise, Wi-Fi Protected Setup and Wi-Fi Direct. By understanding the threats and how they work, we can then review the standards and solutions which address these vulnerabilities such as 802.1x and the various EAP methods, and 802.11w and Wi-Fi Protected Management Frames. We will also consider the implications of fast secure roaming in voice and video deployments and how 802.11r, 802.11k and Wi-Fi Voice-Enterprise enable those applications. Finally we will examine the role of the wired network in wireless security through policy enforcement based on authentication and authorisation.