Nt1310 Unit 9

Users that have a wireless LAN should add security to ensure only intended users have access. Some safeguards include use of WEP (Wired Equivalent Privacy) encryption, IPsec, WPA (WiFi Protected Access), with a firewall or DMZ. A DMZ (demilitarized zone) is a physical or logical sub-network that separates the LAN from other entrusted networks

Abstract -This paper addresses the internal and the external security challenges in organizations that implements wireless networks. Distributed security is designed to provide a more secure data communication among faculty members, staff and students. A description of the technique used to protect and keep PC 's up and running is illustrated with applications.

While wireless is often considered Ethernet, it uses CSMA/CA (Carrier Sensing Media Access/Collision Avoidance). Wireless network security and signal interference has been a real concern for network administrators. Most of these concerns have been addressed, but the reputation of being a largely free and wide-open media still lingers.

The 802.11 provides the wireless LAN services for the clients, the access points, and the network connecting them. The association service is used by mobile stations to connect themselves to APs. Reassociation lets a station change its preferred AP. Either the station or the AP may also disassociate, breaking their relationship. Stations must authenticate to use a security scheme before they can send frames via the AP. With WPA2, the AP can talk to an authentication server that has a username and password database to determine if the station is allowed to access the network. Before WPA, WEP is used but it is easy to compromise. The distribution service determines the route for wireless or wired network. The integration service is used when

Solution: Arizona State University uses the authentication technique PEAP (MSCHAP v2). The authenticated technique based on Protected Extensible Authentication Protocol Microsoft Challenge Handshake Authentication Protocol version 2 is much more secure as it uses user credentials i.e. username and password which are stored in Active Directory Domain Services (AD DS) to authenticate all the wireless access clients instead of using user and computer certificates for client authentication. For e.g., if

Standardization organizations, like IEEE, ETSI, are providing continuous effort to meet new demands from user by introducing new standards as well as minimizing shortcomings of the previous standards. This includes performance fine-tuning, like smother and seamless roaming capabilities as well as QoS and most importantly security features. These standards are currently in development, and will sit atop of existing ones delivering more robust performance Wireless LAN."[5] The wireless market is expected to grow significantly over the next several years. As this growth occurs, solution providers will also be expected to address security concerns. [6]

In addition to endpoint compliance validation, some solutions (as noted previously) also utilize agents directly in the enforcement of access policies by manipulating protocols or configuration settings on the endpoint itself. However, the effectiveness of those solutions is extremely limited for the same reason as the reliance on supplicants limits the effectiveness of 802.1X, since many endpoint devices will not support the use of agents or supplicants.

The last decade of this millennium saw an increment in the usage of wireless devices such as Bluetooth enabled devices that use wireless networks and smartphones with a wireless enabled feature that can allow users to access the internet from anywhere. All that is required is a place where the WLAN is accessible and then get connected using a username and password provided by ISP. WLANs have gained popularity globally as they are being used in places such as universities, airports, places of residence, cafes and so forth. They have numerous benefits such as mobility and flexibility compared to the traditional wired. As the popularity of its usage continues to heighten, it has become important to look at an aspect of security available for WLANS to prevent the network risks associated with this type of network. WEP is a security mechanism for WLANS that this paper will focus on much. The paper will discuss WEP and the weaknesses it has that make it prone to attack.

If a wireless access point is put in place, then simple security countermeasures should be applied in order to guard the local network from any possible threats. To secure the network, the wireless access point routers should be setup carefully where only allowed employees are permitted to have wireless access. To provide more protection to the business network boundaries, the wireless routers should be setup so that encryption methods along with Wi-Fi Protected Access are activated.11

Wireless networks are offered by many restaurants , hotels , cafes and other public places to their customers , but connecting to such a free wireless network might cause your device some issues regarding to security , if possible reduce the use of such networks [6] .

We all know Wi-Fi networks have broadcast system so there are different security issues in the wireless connection. Hackers can steel every kind of personal data or documents via broadband wired networks or wireless communication. In this paper we will discuss the various remote security dangers to wireless systems at present accessible like Wired Equivalent Privacy. Wi-Fi Protected Access (WPA) and Wi-Fi Protected Access 2 (WPA2). WPA2 is more hearty security systems as compared with WPA on the grounds that it defined as Advanced Encryption Standard. There are few issues in WPA2 like it is helpless against password protected data and utilized the programmer whose compare it with the decoded content. So in this paper we will concentrate

Security should always be a concern whenever planning, designing, implementing, and maintaining a network infrastructure. This is especially true for wireless LANs, which present unique challenges to home users and IT administrators. Unlike traditional Ethernet LANs, 802.11 wireless LANs advertise their network names (SSID’s) into the air unencrypted. This makes it easy for a hacker to intercept by sniffing the Wireless LAN for SSID advertisements coming from the access point. Although it’s possible to disable SSID advertisements in the access point, someone very determined and with the right tools can still obtain this information.

In Today’s world multiple Wireless Local Area Networks (WLANs) can coexist in a airspace. Every wireless mobility devices tries to find the access point through probe request using a unique name that is the Service Set Identifier (SSID) of the network to make automatic authentication. As a wireless user you are concerned only with the broadcast SSIDs that let you connect to a WLAN. This paper discusses about the Wireless Mobility devices communication security issues using Basic Service Set Identifier BSSID or Extended Service Set Identifier ESSID which a network administrator need to keep track of. Also it discusses about the available flaws in it and how by modifying the probe request header we can make the connectivity more secure for the new generation of devices.

Different protocols for wireless security were used throughout the years. In 1997, Wired Equivalent Privacy (WEP) was introduced. It is a security algorithm that was part of the original 802.11 standard. It was suppose to provide data confidentiality comparable to that of wired networks. WEP has many well-known security flaws, is difficult to configure, and is easily broken.

When strictly followed and combined with effective technical solutions, wireless local area network security policies can reduce intrusions, risks, and costs associated with intrusion response and legal action.