1. Wireless Security

2. Why is it important? Wireless security is the prevention of unauthorized access or damage to computers using wireless networks. Over the past two decades, there has been an explosion of mobile devices, seeking to access content from anywhere at anytime. Wireless communications have almost made this a seamless, pleasurable experience. However, it has also made it significantly easier for attackers to target users.

3. The Old Wired Equivalent Privacy (WEP) – The original wireless security algorithm of IEEE 802.11. It intended to provide data confidentiality comparable to that of wired Ethernet networks. Was broken before it was broken. Wi-Fi Protected Access (WPA) – A security protocol and certification. Made to improve on the security flaws of WEP.

4. We broke them! WEP Ratified in 1999, broken by 2003 Was enabled optionally, so never fully implemented Relied on a single shared key amongst users (static encryption) Used a 24-bit IV with the RC4 cipher = too small (repeats after 5000 packets) 802.11 even worked against it: http://www.cs.ucl.ac.uk/staff/M.Handley/papers/fragmentation.pdf http://www.cs.ucl.ac.uk/staff/M.Handley/papers/fragmentation.pdf

5. We broke them! WPA Can be cracked too due to its reliance on TKIP - Man-in-the-middle (MITM) packet injections - integrity and checksums can be circumvented using other 802.11 protocols Wi-Fi Protected Setup (WPS) Short Packet Spoofing (injecting arbitrary data) Bruteforcing (weak passwords)

6. Security Measures(?) Don’t use WEP. Switch to WPA2! Don’t use any entry in the top 1000 SSIDs: www.cs.ucl.ac.uk/staff/M.Handley/papers/fragmentation.p df www.cs.ucl.ac.uk/staff/M.Handley/papers/fragmentation.p df Longer, more random passwords.

7. You try! 1.Check the drive. 2.https://kalitutorials.wordpress.com/2014/07/10/wifi- hack-crack-wep-passwords-with-kali/https://kalitutorials.wordpress.com/2014/07/10/wifi- hack-crack-wep-passwords-with-kali/

8. Try this at home (but don’t get arrested) 1.http://linuxconfig.org/change-mac-address-with- macchanger-linux-commandhttp://linuxconfig.org/change-mac-address-with- macchanger-linux-command 2.http://www.freehowtohackwifi.com/wpawpa2- attacks/wpa-hacking-tricks/http://www.freehowtohackwifi.com/wpawpa2- attacks/wpa-hacking-tricks/

9. Thanks! Feel free to ask myself or any other club members questions regarding this subject and if you would like to test it yourself!