The Lazy Networker

1. Introduction to Wireless Security

Wireless security is crucial to protect networks from unauthorized access, data theft, and cyber threats. Unlike wired networks, wireless networks use radio waves, making them more vulnerable to attacks such as eavesdropping, spoofing, and denial-of-service (DoS).

2. Common Wireless Security Threats

• Eavesdropping: Attackers intercept wireless signals to capture sensitive data.
• Rogue Access Points: Unauthorized APs used to steal data or launch attacks.
• Man-in-the-Middle (MITM) Attacks: Attackers intercept communication between devices.
• Denial-of-Service (DoS): Flooding a network with traffic to disrupt service.
• MAC Spoofing: An attacker changes their device’s MAC address to bypass security.

3. Wireless Authentication Methods

To prevent unauthorized access, wireless networks use different authentication methods:

a. Open System Authentication (OSA)

• No security mechanism; any device can connect.
• Used in public hotspots (e.g., cafes, airports).
• Highly insecure.

b. Pre-Shared Key (PSK) Authentication

• A shared password is used to authenticate devices.
• Common in home and small office networks.
• Used in WPA2-PSK and WPA3-SAE (Simultaneous Authentication of Equals).

c. IEEE 802.1X Authentication (Enterprise Mode)

• Uses a RADIUS (Remote Authentication Dial-In User Service) server.
• Requires usernames and passwords or digital certificates.
• Used in corporate and enterprise networks.
• Supports multiple Extensible Authentication Protocol (EAP) types, including:
  • EAP-TLS (Transport Layer Security): Uses digital certificates for strong security.
  • EAP-TTLS (Tunneled TLS): Secure tunnel for authentication credentials.
  • PEAP (Protected EAP): Uses TLS to encrypt authentication.

4. Wireless Security Protocols

To secure wireless communication, different encryption standards are used:

• WEP (Wired Equivalent Privacy): Weak encryption, easily hacked.
• WPA (Wi-Fi Protected Access): Improved security but outdated.
• WPA2 (Wi-Fi Protected Access 2): Strong encryption using AES, widely used.
• WPA3: Latest standard, provides better security with features like forward secrecy and protection against brute-force attacks.