Everand Logo

Welcome to Everand!

  • Discover millions of ebooks, audiobooks, and so much more with a free trial

    Only $11.99/month after trial. Cancel anytime.

    Seven Deadliest Wireless Technologies Attacks
    Seven Deadliest Wireless Technologies Attacks
    Seven Deadliest Wireless Technologies Attacks
    Ebook281 pages3 hours

    Seven Deadliest Wireless Technologies Attacks

    By Brad Haines

    ()

    Read preview

    About this ebook

    Seven Deadliest Wireless Technologies Attacks provides a comprehensive view of the different attacks against popular wireless protocols and systems. Each chapter includes an example real attack scenario; an analysis of the attack; and methods for mitigating the attack. Common themes will emerge throughout the book, but each wireless technology has its own unique quirks that make it useful to attackers in different ways, making understanding all of them important to overall security as rarely is just one wireless technology in use at a home or office.
    The book contains seven chapters that cover the following: infrastructure attacks, client attacks, Bluetooth attacks, RFID attacks; along with attacks on analog wireless devices, cell phones, PDAs, and other hybrid devices. One chapter deals with the problem of bad encryption. It demonstrates how something that was supposed to protect communications can end up providing less security than advertised.
    This book is intended for novices and anyone in a technical role either as the family tech support to corporate IT managers. It also assumes some familiarity with basic networking and computer use.

    Attacks detailed in this book include:

    1. 802.11 Wireless-Infrastructure Attacks
    2. 802.11 Wireless-Client Attacks
    3. Bluetooth Attacks
    4. RFID Attacks
    5. Analog Wireless Device Attacks
    6. Bad Encryption
    7. Attacks on Cell Phones, PDAs and Other Hybrid Devices
    LanguageEnglish
    PublisherElsevier Science
    Release dateMar 13, 2010
    ISBN9781597495424
    Seven Deadliest Wireless Technologies Attacks
    Author

    Brad Haines

    Brad "RenderMan" Haines, Contributing Author to RFID Security (ISBN: 978-1-59749-047-4, Syngress) and Kismet Hacking (ISBN: 978-1-59749-117-4, Syngress), is chief researcher of Renderlab.net and co-refounder of "The Church of WiFi" wireless think tank. He currently operates his own consulting company in Edmonton, Alberta, Canada, providing wireless performance and security assessment services for a variety of clients both large and small. A noted expert in the hacker community in the field of wireless security, he has spoken at many international conferences such as Black Hat and DEFCON and taught several classes on free wireless assessment tools. He has also contributed over time to many wireless security tools such as the Kismet wirelss sniffer and coWPAtty.

    Related to Seven Deadliest Wireless Technologies Attacks

    Related ebooks

    Information Technology For You

    View More
    View More

    Related podcast episodes

    Related articles

    • Article

      Airwave Autonomy

      Aug 10, 2021

      Airwave Autonomy
      7 min read

    • Article

      Secure Your Servers

      Apr 7, 2020

      No matter what you do with your Linux servers you will almost certainly have SSH access to them. Indeed this might be the only access you have, so it would be wise to secure it. Naturally, you will already be using a strong password and will have alr

      4 min read

    • Article

      ‘Open Ports’ Leave a Hole in Smartphone Security

      May 8, 2017

      Smartphone apps that use “open ports” to share and receive data are more vulnerable to security breaches than previously thought, mainly due to the their widespread use in internet communication, a new study suggests. The vulnerability the researcher

      3 min read

    • Article

      Hacker Distributions

      Nov 17, 2020

      Hacker Distributions
      1 min read

    • Article

      Hack The Planet/Parrot

      May 31, 2022

      Hack The Planet/Parrot
      2 min read

    • Article

      Hand-tossed

      Oct 26, 2021

      When looking at the continuum of force options available to civilians, as opposed to those used by armed professionals in law enforcement and military service, there’s a small but glaring gap in available technology. They’re known by a slew of monike

      9 min read

    • Article

      Free Book

      Mar 13, 2020

      Former CIA Officer Reveals the 37 Critical Items You Must Have to Build the Ultimate Escape Bag. (As seen on Shark Tank) In the next few days, I am (with your permission) going to send you a brandnew copy of my book, The Escape Bag Blueprint: 37 Item

      1 min read

    • Article

      Options

      Aug 16, 2022

      Options
      2 min read

    • Article

      SHARP EDGES & DIRTY TRICKS

      Feb 28, 2020

      SHARP EDGES & DIRTY TRICKS
      9 min read

    • Article

      Protector Symposium 5.0

      Apr 18, 2023

      Protection is an individual right and an individual responsibility. This statement shouldn’t be controversial in the slightest, but in recent years, an increasing number of politicians and lawmakers have expressed a belief that protection is solely t

      11 min read

    • Article

      Social Engineering

      Oct 15, 2019

      Social Engineering
      5 min read

    • Article

      Covert Entry Tools

      Feb 28, 2020

      Covert Entry Tools
      4 min read

    • Article

      Hacker’s Manual

      Nov 17, 2020

      Hacker’s Manual
      1 min read

    • Article

      Best Free Software

      Feb 16, 2022

      Best Free Software
      2 min read

    • Article

      Security Apps

      Feb 8, 2022

      Security Apps
      13 min read

    • Article

      Secure Mobile Comms

      Dec 6, 2022

      Secure Mobile Comms
      9 min read

    Related categories

    Reviews for Seven Deadliest Wireless Technologies Attacks

    0 ratings

    0 ratings0 reviews

    What did you think?

    Tap to rate

    Review must be at least 10 words

      Book preview

      Seven Deadliest Wireless Technologies Attacks - Brad Haines

      risk.

      CHAPTER 1

      802.11 Wireless – Infrastructure Attacks

      Publisher Summary

      Wired Equivalent Privacy (WEP) is the original encryption scheme included in the 802.11b wireless standard from 1997. WEP is based on the RC4 stream cipher algorithm, and as with any stream cipher, identical keys must not be used. The initialization vector (IV) changes with each packet and eventually repeats, giving an attacker, two packets with identical IVs. The counter used for IVs in the previous years was 24 bits long, which on a fairly busy network meant that there was a good chance that after 5,000 packets, an IV would be repeated, yielding an IV collision where two packets were encrypted with the same key, thus providing a basis for cryptanalysis. The advent of the ARP replay attack really shortened the time needed to perform an attack. The ARP replay attack is where an encrypted ARP packet is captured from a network and retransmitted back to the access point (AP), which in turn sends back another ARP packet with a different IV. There are many tools available that break WEP, but the most popular is Aircrack-ng. Wi-Fi Protected Access2 (WPA2) (also known as 802.11i) is the final and more secure version of WPA. WPA2 uses Advanced Encryption Standard as its stream cipher, which is vastly more secure but requires resources only found on the newer generations of APs and is not available on older equipment.

      Information in This Chapter

      • How Wireless Networks Work

      • Case Study: TJX Corporation

      • Understanding WEP Cracking

      • How to Crack WEP

      • It Gets Better and Worse

      • WPA and WPA2 in a Nutshell

      • How to Crack WPA PSK and WPA2 PSK

      Just about every new laptop that hits the market today has an 802.11 network card built in. It’s a technology that has become ubiquitous in our lives, and we can hardly remember a time when it wasn’t part of our days. It’s a technology that has grown in terms of speed and range to provide the capability to be connected to the Internet from anywhere in our homes or businesses.

      This widespread technology would also very quickly become quite an issue from a security perspective. Users quickly demanded to cut the cable and be able to access the network from anywhere in the office. Home users were quick to adopt the technology to work from the kitchen, the couch, or (more oddly) the bathroom. This intense push led to a lot of overworked and underpaid information technology (IT) administrators and neighborhood computer know-it-alls to install wireless networks without properly understanding the security risks involved. These early networks would continue to just work with users not realizing that the security arms race caught up with them and even passed them, making them prime targets for attack.

      In November 2003, Toronto, Ontario, police held a press conference to announce a (at the time) new and unusual crime.A The police report indicates that at around 5:00 A.M. an officer noticed a car slowly driving the wrong way down a one-way street in a residential neighborhood. The officer pulled the car over, and when he walked up to the driver, he was greeted with several disturbing sights. The driver was first of all not wearing any pants, which is probably disturbing in and of itself, but more alarmingly, on the passenger seat was a laptop clearly displaying child pornography. The driver had been using open wireless networks in the area to obtain Internet access to download child pornography, unbeknownst to the owners of those networks. The owners were victims themselves, twice. First, they were victims of theft of service since their communications had to compete for bandwidth with the traffic of the unauthorized user. Second, they were victimized because, for all intents and purposes, the child pornography was being downloaded through their connection. Any digital trail left would lead back to them, potentially exposing them to false accusations of downloading child pornography themselves and all the emotional and financial damage that accusation can bring. The suspect’s home was searched as a result, and 10 computers and over 1,000 CDs worth of illegal material were

      Enjoying the preview?
      Page 1 of 1