07 - Wireless Network Security

Theory: Wireless network security

Labs: Examining WiFi Securit

7.1

7.1) Read the article: “An Experimental Study Analysis of Security Attacks at IEEE 802.11”. Find the important facts and write them down. Discuss limitations of the attacks and possible mitigations.

7.2

7.2) Install inSSIDer from https://www.metageek.com/inssider/ and/or WiFi Explorer from https://www.accessagility.com/wifi-explorer-for-windows. You may also search for similar tools for Mac, iOS, Android. Try to scan for WiFi networks at campus and at home to identify their security modes and discuss your findings.

7.3

7.3) For this exercise you need the Wireshark network sniffer from https://www.wireshark.org. With Wireshark try to capture WiFi communication. When laptop is connected to WiFi that will be all captured packages. Try to switch to monitor mode, if possible – depends on your hardware – (see https://wiki.wireshark.org/CaptureSetup/WLAN) and sniff all traffic on a WiFi channel. Try if you can identify EAP handshakes. At campus that should be possible when connecting your (or another) laptop to WiFi, but it could take a few minutes before some device is part in a handshake. You could connect your mobile phone to WiFi (assuming is has not yet been connected) and that should result in a handshake.

7.4

7.4) Get an overview of the article “WPA3 and Enhanced Open: Next Generation Wi-Fi Security” and describe shortly what is new compared to WPA2 and how the news improve security.

7.5

7.5) Get Cisco Packet Tracer simulation tool from https://www.netacad.com/courses/getting-started-cisco-packet-tracer and get started using it. You might have it already from another exercise. (You need to create an account on the Cisco Networking Academy website. We advice NOT to login with Google and NOT to reuse your DTU account password). In the ‘File’ menu in Packet Tracer open samples and move to ‘01 Networking\Wireless\Wireless LAN\WLC’. Here select ‘wlc_pt_simple_wlan_wpa_radius.pkt’ Explore the setup of Radius server, Wireless LAN Controller, and the Access Point. Run simulation and watch the package