Wireless Security Workshop
-
Security Protocols for Wireless : WEP
(no documented cases of WEP being cracked in the “wild”),
LEAP, TKIP, Broadcast Key Rotation, VPN, etc. How to
use these protocols to make wireless secure. Other
wireless security
options, WPA/802.11i, 802.1x (EAP TLS, EAP-TTLS, PEAP).
-
Configurations for highly secure wireless systems : SSIDs.
Hiding your wireless network? Hardening wireless
access points (WAPs). Securing WAPs against theft.
-
War Driving : Is it a problem? How to
protect yourself from War Driving? Should you be
worried if someone can map your network?
-
Traffic Sniffing : Is WEP really secure?
How does encryption (e.g. SSL/SSH, VPN, etc.) help
and hinder sniffing and management? Can antenna type help
prevent others
from sniffing? Can controlling the radios power output
help?
-
Rogue Access Points : How do I find them?
Are they a problem? Ad hoc (peer to peer)
mode. Competition to route traffic between access points.
Policy issues
around Rogue Access Points. Frequency selection coordination.
-
Being a good neighbor : Interference
with and from neighboring wireless systems. Frequency
selection. Antenna placement and types. The uneducated
neighbor.
-
Wireless security tools : What tools
are available to make it easier to secure wireless systems
(e.g.AirMagnet, AiroPeek, AirSnort, Ethereal, Kismet, NetStumbler,
WEPCrack, etc)? Or maybe they don’t make it easier.
Commercial approaches to enterprise WAP security (e.g.
ReefEdge). Intrusion
Detections Systems that may allow you to detect when
someone has gotten around your security.
-
Future network protocols : How might
things like IPv6 and IP Multicasting work over wireless
networks? Are there any problems? 802.11i/WPA2 with AES
require new
hardware for implementation.
-
Proprietary implementations : 108 mb
G+, Turbo etc. (channel doubling and the problems
that come with it).
-
Issues with mixed B/G Networks : B clients
slow down G networks. 54 mb G has smaller coverage
area then B networks.
-
Capacity Planning : Is what makes sense
today going to have legs for the future. Critical
issues if you have to adjust capacity by adding access
points.
-
User training : Network Staff, Help Desk,
End Users, both with regards to how to configure
and use the wireless network as well as security issues.
-
Physical Security : Training Security
staff to recognize suspicious activity as it relates to the
wireless and wired network.
|
|