Tim hiéu ky thudt va ede cng cy tin cong mang Wireless LOINOI DAU Sy tién b6 cla nén khoa hoc céng nghé théng tin da gop phan lim cho doi séng xa hdi ngay cang phong phi. N6 mang lai siéu Igi nhuan cho nén kinh té cia méi quéc gia va toan cau, dng thoi mang lai nén van minh cho nhan logi chua timg c6 tir truéc dén nay. Viét Nam 1a m6t nude dang trén da phat trién va hoi nhap, nhing anh hung tich cue va hé qua wu viét do céng nghé théng tin mang lai cho nén kinh té va ddi séng xa h6i khoang vai chuc nim gan day da chimg minh diéu nay. H@ théng mang khéng Wireless day 14 m6t phat trién vuot bic ciia nganh céng nghé théng tin. ‘Sw phat trién khéng ngimg cia mang WiFi trong vai nim gan day gan giéng nhu sy bing né cita Internet trong nhiing thap ky qua. Tuy nhién mang WiFi van 1a. mét mang rit dé bi tin céng. Ti nim 1997 dén bay gid, rit nhiéu nghién ctu nhim ting cudng tinh bio mat cia mang WiFi 43 duoc thyc hign, MGi trudng khong day 1a m6t méi trudng chia sé (shared medium) trong dé théng tin truyén di c6 thé dé dang bj thu Iai (intercepted). Do d6, bio vé théng tin truyén trén kénh khdng day 1a yéu cau cp thit Chuan WiFi IEEE 802.11 ban du sir dung giao trinh WEP (Wired Equivalent Privacy) dé bao mit théng tin. Giao trinh nay c6 thudn Igi 1a dé cai dt va quan li, Tuy nhién, WEP lai chira dyng nhiéu yéu diém va dé bj tan c6ng. Tiép theo sau d6, IEEE 802.1x da dugc st: dung dé hgn ché nhiing yéu diém cia WEP. Tiép theo giao trinh WEP2 cing da duge edi tién tir WEP ban iu bang cach ting thém chiéu dai ciia Initialization Vector vi chiéu dai cia ma khéa (encryption key). Tuy nhién cho bio mét ciiaWiFi thi phai nhac dén WPA (Wifi Protected cai tién dang Access). Thue t8, WPA la mét giai phap tam thai 48 dap img yéu cau tite thoi cia thj trudng trude khi chudn 802.11i ra déi. [EEE 802.11i con duge biét dén nhu la WPA2 di duge chun héa tir gitta nim 2004. Tuy nhién cung vai sur phat trién do cung phat sinh co nhumg ca nhan, t6 chuc lai dung dé truy cap, lay cap tai ligu ... vao nhung muc dich khac nhau bang each GVHD: Nguyén Tin Khoi Trang 1 SVIT: Dao Lé Son TungTim hiéu ky thudt va ede cng cy tin cong mang Wireless tan cOng trai phep. Truy cip tai nguyén files trén mang Wireless. Nim muc dich nguyén cuu va tim hiéu cach thue truy cap dé nguoi dung hiéu hon vé van dé nay. Vi vay, em da chon dé tai : “Tim hiéu kp thudt va cée céng cu tin cong mang Wireless” A. CO SO LY THUYET 1. Wifi la gi? Wi-Fi hay WiFi hay wi-fi hay wifi déu nhw nhau, No duge viét tat ciia tir Wireless Fidelity (khong day trung thye) hay mang 802.11. Thye ra n6 c6 tén 1a ‘The Standard for Wireless Fidelity (chun cho khéng day trung thy). Wi-Fi li hé thong mang khéng day sit dung séng v6 tuyén, ging nhu dign thoai di d6ng, truyén hinh va radio. N6é nhanh hon va pham vi hoat déng lon hon Bluetooth. Hé théng nay hoat d6ng 6 mét sé sn bay, quan café, thur vign hoje khach san. Hé théng cho phép truy cép Internet tai nhiing khu vue c6 séng ciia hé théng nay, hoan toan khéng cin dén cap néi. Ngoai cdc diém két néi céng cGng(hotspots), Wi-Fi cé thé duoc thiét lip ngay tai nha riéng. ‘Tén goi 802.11 bat nguén tir vign IEEE (institute of Electrical and Electronics Engineers). Vign nay tao ra nhiéu chudn cho nhiéu giao thite ky thuat khac nhau,va n6 sir dung mét hé thong sé nhim phan loai ching; 3 chuan théng dung cia Wi-Fi hign nay la 802.1 1a/b/g/n. IL. Sy hinh thin, phat trién va tong lai cita Wifi Céng nghé Wi-Fi xuat hign lin dau vao nim 1997. Ngay nay céng nghé nay da duge phat trién rat manh va hign dang 6 chudn 802.1 1n. Trong bai nay sé giéi thigu cho mt sé kién thite co bin vé céng nghé nay, song song vei dé 14 mt phac thao van tat vé sur phat trién ca nd. GVHD: Nguyén Tin Khoi Trang 2 SVIT: Dao Lé Son TungTim hiéu ky thudt va ede cng cy tin cong mang Wireless Gidi Chuan 802.11 1a chudn duge sit dung cho céng nghé Wi-Fi bat dau tir nim 1997 do Institute for Electrical and Electronies Engineers (IEEE) ban bé, Theo thi thiéu cdc chuan gian chuin nay di duge phét va ngay nay ching ta dang 6 phién bin 802.1 Ln Institute for Electrical and Electronics Engineers (IEEE). Trong dé JEEE 1a mét t6 chite khoa hoc nghé nghigp duge xAy dyng nhim muc dich hé tro céc hoat déng nghién cru khoa hoc, thc diy su phat trién khoa hoc cOng nghé trong céc Tinh vyc dign tir, vién théng, céng nghé thdng tin, khoa hoc my tinh. Vién nay gém cé nhiéu ky su dign va dién tir (nhiéu ngudi c6 bing cip cao dang lim viéc tai cdc truéng Dai hoc danh tiéng trén toan thé gidi), cé thé ndi ho 1a céc chuyén gia trong timg linh vc. Té chite cdc chudn nay ra d6i xudt phat tir su cn thiét can cé cdc chuan duge chap thudn rong rai dé bao dam kha ning tuong thich gitta cdc thiét bj trén toan thé gidi. Day chinh 1A mét trong nhimg nhigm vu kho khan nhit cla IEEE, bao dim sy chap thudn réng rai: mOt nhiém vu ma ho khéng phai lic nao cing thyc hign duge. Cac chuan duge céng b} bei IEEE bao gém tat ca cdc linh vue ky thuat dign tir c6 lién quan dén mang méy tinh. Khi ¢6 ai 46 phan tich cdc chudn, mét digu quan trong cin phai nhé ring higu sudt thudng khéng phai 1 muc tiéu thiét ké ctia cic chuin. Trong thye 18 ede chun cé thé khéng due hoan hao. Mie dit vay, nhu ggi ¥ 6 trén, mét chudn chi ¢6 gid tri néu né durge chip thudn rng rai; myc tiéu nay chinh 1a sgi chi dé xuyén sudt qua trinh thiét ké cde chuan, Tiéu ban ca IEEE ma bai viét nay gidi thigu vé 1a tiéu ban LAN/MAN. Tiéu ban nay da duge chi dinh bé dinh danh 802, vi vay méi mt chuan duge quyét dinh bai tiéu ban nay sé bat dau voi b6 dinh danh 802. Chi sé 11 trong 802.11 cé nghia chun cé lién quan dén sy diéu bién trong kh6ng gian; vi vay tit cd cde chudn 802.11 sé duge céng bé béi tiéu ban 802 va sir dung sw diéu bién trong khéng gian. Chang ta thudmg thay chi s6 802.11 va nhiéu chudn khac cho chi dé duge viét cing Gi thai gian phia sau b6 chi dinh, ching han nhu 802.11-1997. Thdi gian due ghi GVHD: Nguyén Tin Khoi Trang 3 SVIT: Dao Lé Son TungTim hiéu ky thudt va ede cng cy tin cong mang Wireless nay chinh 1a théi diém céng bé chudn. Khi dua ra m6t chudn, tiéu ban s& cong bb nhiing cp nhat méi nhat va thoi gian nay sé thay déi theo céng bé gan nhat. Thém_ vao dé ching ta cing sé thuimg thdy céc b6 dinh danh duge miéu ta cling voi mot chit cai in thuong, ching han nhu 802.11b. O day cdc chit cai in thudmg chi thj su stta d6i déi véi chuan duge céng bé ban dau. Trong truéng hgp 802.11, chit cdi in thuéng duge gin cho nhiing sita déi di duge phé chudn nhim trg gitp céng nghé 802.1106 duge t6e d6 16 hon, pham vi rng hon, 46 tin cdy t6t hon, hode sy két hgp ca ba yéu t6 ten, a.Chudn 802.11-1997 Chuan duge céng bé dau tién cho Wi-Fi 1a 802.11-1997, day la chuan duge cng bo vao nam 1997. Nhu 6 trén da néi IEEE khéng phai lic nao cing thanh cOng trong muc tiéu chip thudn réng rai, Day 1 mét truéng hop nhu vay. Chuan ban dau 43 nhan duge rit it sy thira hin. M6t phan 1a do tc d6 bit thap cita né chi khong | hoi 2MB/s. Téc 6 bit thye su phu thudc vao lién két vat ly duge sir dung dé truyén tai dit ligu, Chuan $02.11-1997 da cho phép ba cng nghé khée nhau c6 thé sir dung: Y Hong ngoqi: Céng nghé cung cap théng long 1 MB/s Y Frequency Hoping Spread Spectrum: Cong nghé cung c4p thong Iugng | hode 2 MB/s. ¥ Direct Sequence Spread Spectrum: Céng nghé cing cung cp thong lung | hoac 2 MB/s. Ti Ié chap thuan thap d6i véi chuan céng nghé nay 1a do mét phan téc d6 bit thap, tuy nhién né cing cé mét phan 1a sy dit d6 ctia céng nghé. Vao nam 1997, viéc thiét ké cdc bé thu va phat duge yéu clu dé sir dung chuan 802.11-1997 kha dat tinh trén diu ce may tinh, de bigt 14 cde may tinh laptop, do kha ning di dong cia ching yéu cau can phai 6 cong nghé Wi-Fi). Tuy nhién vé sau nay, chudn 802.11 duge cp nhat vao nim 1999 véi cdc b6 dinh danh “a” va “b” da nhan duge sy dong GVHD: Nguyén Tin Khoi Trang 4 SVIT: Dao Lé Son TungTim hiéu ky thudt va ede cng cy tin cong mang Wireless thugn nhidu hon. Mic di 802.11a va 802.11b du duge phat hanh ding thoi vio ‘nam 1999 nhung chi ¢6 802.11 duge chap thuan mot cach rong r b.Chudn 802.1 1a va 802.116 802.11a la mét chun durge cai thign tir 802.11-1997, Trong khi 802.11-1997 chi c6 thé truyén tai dir ligu voi téc 46 2MB/s thi 802.1 1a c6 thé truyén tai dit ligu véi tc dé 54 MB/s. Vide ting téc d6 truyén tai dit ligu nay 1a do sir dung tin sé S5GHz thay cho tin s6 2.4GHz duge sit dung trong 802.11-1997 ( tin s6 duge sir dyng cho cée tly chon Frequency Hoping Spread Spectrum va the Direct Sequence Spread Spectrum; khéng cé tiy chon hing ngoai). Ngoai vige ting vé téc d6, mot uu diém khac trong viée sit dung tin sé SGHz la khong cé nhiéu thiét bi sir dung tin s6 nay, vi vay kha nang xuyén nhigu giita cde thiét bi s gidm. Mgc dit iy vide sit dung bing tin SGHz cing cé mét nhuge diém én. Do tin sé SGHz sir dung song ngin (tin s6 c6 ty 18 nguge véi bude séng; chinh vi vay tin sé cdng cao thi bude song sé cang ngin) nén ky thugt nay ¢6 pham vi phit song kém hon va tin higu bi can tr nhiéu hon béi nhig vat can nhu cdc bitc tuong; thm chi khéng cé nhiéu bire tuéng nhung néu tin higu truyén trong khéng gian cé nhiéu d6i twong (ban va ghé,...) cudng d6 tin higu bj suy giam rat nhanh, 802.11b thira hung Direct Sequence Spread Spectrum tir chun 802.11- 1997 ban dau, cing véi tin sé hoat déng 2.4 GHz. Viée tiép tye sir dung tin s6 2.4 GHz cé ca wu diém va nhuge diém. Uu diém & day 1a tan sé nay khong bj diéu chinh lai va vi vay gia thanh chi phi san xudt sé ré hon. Tuy nhién nhuge diém 1a c6 nhieu thiét sir dung sir dung tan s6 nay (dign thogi kéo dai, cdc b6 kiém tra tré nho), tat cd chung déu 6 thé xuyén nhigu lan nhau. ‘Thay ddi cha yéu trong 802.11b la tc 46 dit ligu ti da. Téc 46 dit ligu tdi da cia 802.11b dat khoang 11MB/s, con s6 cé thé so sinh véi téc dg Ethernet truyén, théng 6 nhing nim 1999 va 2000. Voi téc 46 nay, nhiéu khach hang cé thé sit dung , thira hudng tat ca nhimg wu diém vé kha nang di déng ma khéng bj cdc GVHD: Nguyén Tin Khoi Trang 5 SVIT: Dao Lé Son TungTim hiéu ky thudt va ede cng cy tin cong mang Wireless nhuge diém vé téc 49. Cung véi viée gidm duge dang ké gid thanh trong cong nghé 43 kam cho cOng nghé 802.11b duge sy chap thuan mét céch rong rai. c.Chudn 802.11g Khi téc dO Ethernet ting, diéu nay da tac dng dén chuan 802.11. Vao nim 2003, IEEE di phé duyét chuan 802.11g. Chuan 802.1 1g nay hoat dng 6 tan s6 2.4 GHz, giéng nh 802.11b va 802.11-1997, nhung né sit dung ky thuat Orthogonal Frequency Division Multiplexing (OFDM) da duge sir dung boi 802.11a. K¥ thuat OFDM nay di cho phép 802.11 hoat dng & téc dO 54 MB/s; mét su tng ding ké vé téc 46 so v6i 802.11b la 11 MB/s. Giéng nhu 802.11b, 802.112 cing duge chip thugn mét cdch rng rai cho cd khach hing va doanh nghiép. d.Chuan 802.11n 802.11n la chuan méi nhét hién nay, chudn nay vita duge phé chudn vao thing 9 vita qua, 802.11n sir dung mt cong nghé méi dé ting tée 49 dit Higu dé 1 Multiple Input / Multiple Output (MI-MO). ILL M6t sé phuong phap bao mat WiFi — Su phat trién khéng ngimg cia mang WiFi trong vai nim gan day gan giéng nhu su bing nd ciia Internet trong nhing thap ky qua. Tuy nhién mang WiFi vin li mot bi tin cong. Tir nim 1997 dén bay gid, rit nhiéu nghién ciru nhim ting cudng tinh bio mat etia mang WiFi di duge thye hign. Mai trudmg khéng day ki m6t méi trudng chia sé (shared medium) trong d6 thong tin truyén di c6 thé dé dang GVHD: Nguyén Tin Khoi ‘Trang 6 SVIT: Dao Lé Son TungTim hiéu ky thudt va ede cng cy tin cong mang Wireless bj thu Iai (intercepted). Do d6, bio vé thing tin truyén trén kénh khOng day ld mot vyéu edu ep thi 1. Cong nghé bio mat WEP WEP la tir viét tit cua Wired Equipvalent Privacy, nghia 1a bao mat tuong duong véi mang 6 day (Wired LAN). Khai niém nay 1a m6t phan trong chuan IEEE 802.11. Theo dinh nghia, WEP duge thiét ké dé dam bao tinh bao mat cho mang khéng day dat mirc 46 nhu la mang néi cap truyén thong. Déi voi mang LAN (dinh nghia theo chudn IEEE 802.3), bao mit cho dit ligu trén during truyén d6i voi cae tin céng bén ngoai duge dam bao qua bién phap gidi han vat ly, tire la hacker khéng thé truy xuat truc tip dén hé théng dudng truyén cdp. Do dé chudn 802.3 kh6ng dit ra van dé ma héa dit ligu dé chéng lai cde truy cap tréi phép. Déi voi chuan 802.11, vip 48 ma hoa di ligu fivgc dat lén wu tién hang dau do dic tinh cua mang khéng day la khong thé gidi han vé mat vat ly truy cp dén fiuéng truyén, bat ctr ai trong ving phi song déu cé thé truy cép dif ligu néu khéng Auge bao vé. N6i mt céch tm gon, WEP cung cp bao mat cho dit ligu trén mang khong day qua phuong thitc ma héa sit dung thuat toan déi ximg RC4, duge phat minh bdi Ron Rivest, nhan vién cita hing n6i tiéng RSA Security Inc. Thuat toan RC4 cho phép chiéu dai ciia khda thay déi va c6 thé lén dén 256 bytes. Chuan 802.11 d0i hoi bat buGe cdc thiét bj WEP phai hé tro chiéu dai khéa téi thiéu la 40 bit, déng thai dam bao tly chon hé trg cho cac khéa dai hon. Hign nay, da sé céc thiét bi khéng day hé tro WEP véi ba chiéu dai khoa, 40 bit, 64 bit, va 128 bit. Voi phuong thire ma hoa RC4, WEP cung cdp tinh bao mét va toan ven cita thng tin trén mang khéng day, dong théi cé thé duge xem nhw li mét phuong thie kiém soat truy cp. Mét may néi mang khéng day khéng cé khéa WEP chinh xac sé khéng thé truy cp dén Access Point (AP) va cing khéng thé gidi ma cing nhu thay di dit ligu trén duéng truyén. ‘Tuy nhién, gin day da cé nhiing phat hign cia gidi phan tich an ninh cho thay néu bat duge mét sé Iugng lén nhat finh ctia dit ligu da ma hoa sir dungWEP va sir dung GVHD: Nguyén Tin Khoi Trang 7 SVIT: Dao Lé Son TungTim hiéu ky thuat va cdc céng cy tin céng mang Wireless cong cy thich hgp, e6 thé dd tim duge chinh xe khéa WEP trong thoi gian ngin, Diém yéu nay La do 16 hdng trong cach thire WEP str dung phuong phap ma héa RC4 2. Cong nghé bio mit WPA/WPA2 2.1 WPA (Ia viet tac cra Wi-Fi Protected Access) 1a chuan Wi-Fi duge thiét két dé cai tién tinh ning bao mat cua WEP (Wired Equivalent Privacy). Cho du router ctia ban da cé tud tho vai nim, chic chin né vin hé try dang WPA (néu khéng, nang céip ban firmware mdi nhit la duoc). Phién ban dé ding nhat va duge hé trg ring nhit bay git 1a WPA Personal, déi khi con duge goi 1a WPA Pre-Shared Key (PSK). Dé ma khod m6t mang véi WPA Personal (hay PSK), ban can cung cAp cho router khéng phai mét khod ma hoa ma la mét cum mat khdu tiéng Anh don thuan tir 8 dén 63 ky tu. Sir dung ky thuat goi la TKIP (Temporal Key Integrity Protocol — giao thite toan ven khod théi gian), cum mat khdu 6 cing véi SSID mang duge diing dé tao cdc khod ma hoa duy nhat cho timg may tram khéng day. Cac khod ma hoa nay duge thay d6i thudmg xuyén, (Mic di WEP cing hd try cum mat khéu nhung chi nhim myc dich tgo khod tinh dé dang hon, thudng bao gém ky ty hé heexa: sé tir 0 dén 9 va chit tir A dén F). Dang tide 1a ngay nay van cé nhiéu thiét bi khong day khong hé tre WPA duge ban ra thj truéng (hau hét la cae thiét bj tiéu tn dign ning 1én).Trung thyc ma néi, ban nén trinh mua céc thiét bj logi nay. Véi may tinh thong thuéng, WPA duge hé try ca Windows XP Service Pack 2 va Mac OS X (tit nhién ci véi Windows Vista).Trong XP, ban sé khéng tim thay cdc tuy chon WPA trén Data encryption trong bang thuge tinh cla Wireless Network Connection. Thay vio 46, hay tim bén du6i Network Authencation va chon Iya kigu Data enerytion phit hp véi thiét lap trén router (TKIP ho%c AES). (Nhiéu router hé try AES, 1a co ché ma. khod manh hon so voi TKIP). Néu cu hinh mét cach phi hyp, WPA sé khéi tao chuong trinh bao vé t6t hon WEP, nhung khdng co nghia WPA la bife turing bao mét van ning. Ban nén GVHD: Nguyén Tin Khoi Trang 8 SVIT: Dao Lé Son TungTim hiéu ky thudt va ede cng cy tin cong mang Wireless tranh str dung cae tir lign quan dén SSID va mt khau WPA trong tir dién (mat khau cang dai cang t6t). Nhu thé sé cung cdp chuong trinh bao vé tot hon la ding “hé théng lién két” hay tén “ngudi yéu” ban. 2.2 WPA2 1 mOt chudn ra dvi sau d6 va duge kiém dinh Lin dau tién va ngay 1/9/2004. WPA2 duge National Institute of Standards and Technology (NIST) Khuyén céo sir dung. WPA2 sir dung CCMP/AES cho vige ma héa va toan ven dit ligu so v6i phién ban trude thi WPA2 can ning lye sir ly cia chip cao hon vi n6 str 6i véi cde card WIFI doi ci muén sit dyng duge WPA2 can phai nang cp firmware lén phién ban méi nhat. WPA2 thich dung co ché ma hoa phite tap va manh vi thé hop déi véi cdc hé thong mang doi hoi mire 46 bao mat cao. CCMP ding thugt toan AES (Advanced Encryption Standard), thuat toén ma da khéi (Block cipher) dé ma héa va chéng stra d6i dit ligu chi v6i mot key.D6 dai key trong giao thire CCMP i 128 bing thudt toan CBC-MAC ding. PN, .CCMP ding MIC dé chéng sira déi dit ligu mi héa phin header (Priority field, MPDU, sau d6 XOR véi cac khéi dit ligu 64 bits 48 tao MIC, MIC gém 128 bits nhung chi ding 64 bits dau. MIC sau dé dugc gin vao phan di ligu chua duge ma ha rdi dem toan bé dit ligu gdm ca MIC di ma héa bang Counter Mode. Nhu vay ta cé thé thay la CCMP ding Counter-Mode dé mi héa dir ligu va ding CBC-MAC dé chéng stra déi dit ligu.CCMP cing cé kha nang chéng replay nhw TKIP bing cach ding Packet Number (PN), vi PN c6 vai trd va each thite hoat dong giéng TSC trong giao thite TKIP.CCMP ciing hé try chitng thy, tao va quan ly key theo giao thtic EAP ding thuat ton AES. Giao thite CCMP ¢6 day dui cde tinh nang bao mat ca TKIP va an toan hon TKIP bing viéc sir dung thuat toan AES thay cho thuat toan RC4 vén con nhiéu diém yéu. GVHD: Nguyén Tin Khoi Trang 9 SVIT: Dao Lé Son TungTim hiéu ky thugt va ede cng cy tin céng mang Wireless Thufi ton AES duge diing cho ca 2 qua trinh chimg thye va ma héa.Trong giao thire CCMP thudt toan AES c6 thé duge thay thé bing mt thugt ton 128 bits khic B. TAN CONG WIRELESS I. Cac buroc hack WEP 1. Chuan bi A. Phin cung - May PC hoi laptop. Néu la PC co card Wireless - AP cau hinh bao mat WEP B, Phin mém ~ PC cai dit HDH linux or Backtrack 4 hoe cao hon ~ Oday minh sur dung hack trén HDH Backtrack 4 2. Tién hanh - Boot backtrack 4 lén PC cai iso lén may ao Vware - Dung lénh ifeonfig-a dé do Interface cua card mang. Mac dinh no la Wlan0. Chuyén wireless card sang ché dé man hinh ( wireless card for monitor) GVHD: Nguyén Tin Khoi Trang 10 SVIT: Dao Lé Son TungTim hiéu ky thudt va cdc c6ng cy tin céng mang Wireless Session Edit View Bookmarks Settings Help ee cee Trong vung do song cua Wireless card co 3 AP WEP, | AP la SSID la chung (bao mat WPA), | AP la CNTTpro (AP nay co 5 két ndi). Ta se hack AP nay (ngoai ra con co 1 ESSID ghi la