HACKING & INFORMATION SECURITY Presents: - With TechNext

Size: px

Start display at page:

Download "HACKING & INFORMATION SECURITY Presents: - With TechNext"

Caitlin Spencer
6 years ago
Views:

1 HACKING & INFORMATION SECURITY Presents: - With TechNext

2 We Are The Speakers Sudarshan Pawar Cer.fied Security Expert(C.S.E.) Cer.fied Informa.on Security Specialist (C.I.S.S.) Security Xplained (TechNext Speaker) Computer Engg. & a Security Professional Prakashchandra Suthar Security Enthusiast Cisco Cer.fied Network Associate Red Hat Linux Cer.fied Security Xplained (TechNext Speaker) Computer Engg Security Researcher.

4 Topics to be covered Basics of Wifi Types of wireless networks Wireless Standards( series) Encryp.on Algorithms Wireless hacking methodology ATTACKS(commonly encountered) Staying secure(defense) Security Tools We are not including stats, history, who did what/when/why- > Bcoz it s Booooring.!!! U can google them later.!

5 Current Genera.on

6 Basics of Wifi Types of wireless networks Wireless Standards( series) Encryp.on Algorithms Wireless hacking methodology ATTACKS(commonly encountered) Staying secure(defense) Security Tools

7 Wifi Basics WiFi(Wireless Fidelity)- >Wireless networks(commonly referred as WLAN Developed on IEEE standards Wireless networks include: Bluetooth, Infrared communica.on, Radio Signal etc. Components used: o Wireless Client Receiver o Access Point o Antennas

8 Basics of Wifi Types of wireless networks Wireless Standards( series) Encryp.on Algorithms Wireless hacking methodology ATTACKS(commonly encountered) Staying secure(defense) Security Tools

9 Extension to a wired network (EXTENSION POINT) (BROADBAND ROUTER) (ACCESS POINT)

10 Mul.ple Access points (ACCESS POINT- 2) (BROADBAND ROUTER) (ACCESS POINT- 1)

11 LAN - 2- LAN LAN- 1 LAN- 2

12 3g Hotspot Internet GPRS 3G 4G

13 Basics of Wifi Types of wireless networks Wireless Standards( series) Encryp.on Algorithms Wireless hacking methodology ATTACKS(commonly encountered) Staying secure(defense) Security Tools

14 How many of you have tried this???

15 WiFi Standards Points b a g n Extension to a g Bandwidth (Mhz) 20 (11Mbps) 20 (54Mbps) 20 (54Mbps) 20 (54Mbps) 40 (150Mbps) Frequency(Ghz) , 5 Pros Lowest cost; signal range is good and not easily obstructed fast maximum speed; regulated frequencies prevent signal interference from other devices fast maximum speed; signal range is good and not easily obstructed fastest maximum speed and best signal range; more resistant to signal interference from outside sources Cons slowest maximum speed highest cost; shorter range signal that is more easily obstructed costs more than b; appliances may interfere on the unregulated signal frequency standard is not yet finalized;

16 Are u seriously concerned about wifi security????? Be honest!

17 Basics of Wifi Types of wireless networks Wireless Standards( series) Encryp.on Algorithms Wireless hacking methodology ATTACKS(commonly encountered) Staying secure(defense) Security Tools

18 WEP(Wired Equivalence Privacy) The first encryp.on scheme made available for Wi- Fi. Uses 24 bit ini.aliza.on vector for cipher stream RC4 for confiden.ality CRC- 32 bit checksum for integrity. Typically used by home users. Uses 64,128, 256 bit keys Flawed from the get go.

19 WEP Working KEY STORE WEP Key IV RC4 CIPHER KEYSTREAM CRC 32 CHECKSUM DATA ICV XOR ALGO. IV PAD KID CIPHERTEXT WEP ENCRYPTED PACKET(MAC FRAME)

20 WEP Weakness 1. Key management and key size bit IV size is less. 3. The ICV algorithm is not appropriate 4. Use of RC4 algorithm is weak 5. Authen.ca.on messages can be easily forged

21 Wep Broken beyond repair

22 WPA (Wi- Fi Protected Access) Data Encryp.on for WLAN based on std. Improved Encryp.on & Authen.ca.on Method. Uses TKIP Based on WEP Michael algorithm Hardware changes not required Firmware update Types 1. Personal 2. Enterprise PSK 802.1x + RADIUS

23 WPA Working Temporary EncrypUon key Transmit Address KEY MIXING WEP SEED RC4 CIPHER KEYSTREAM T.S.C. MAC HEADER IV KID EIV CIPHER TEXT ( PACKET TO BE TRANSMITTED ) MSDU MIC KEY MICHAELS ALGORITHM MSDU + MIC KEY MPDU ICV

24 WPA2 Long Term Solu.on (802.11) Stronger Data protec.on & Network access control Used CCMP Based on AES Hardware changes required Types 1. Personal Pre Shared Key 2. Enterprise 802.1x + RADIUS

25 WPA2 Working Source: EC Council

26 Source: someecards

27 Breaking WPA/WPA2 Dic.onary Akacks(Not so successful, but yeah some.me ) Brute Force(tools like: Kismac, Aireplay etc) WPA PSK

28 Basics of Wifi Types of wireless networks Wireless Standards( series) Encryp.on Algorithms Wireless hacking methodology ATTACKS(commonly encountered) Staying secure(defense) Security Tools

29 Security breaching sequence Find the network Study its traffic Study Security mechanisms ATTACK!!!!!!!! (i.e. Decrypt the packets)

30 Basics of Wifi Types of wireless networks Wireless Standards( series) Encryp.on Algorithms Wireless hacking methodology ATTACKS(commonly encountered) Staying secure(defense) Security Tools

31 DOS BEFORE ATTACK

32 AFTER ATTACK Access point is busy handling akackers request

33 Man In The Middle Akack(MITM) Before

34 Aler

35 ARP Poisoning/Spoofing Source: h3p://securitymusings.com/wp- content/uploads/2008/12/arp- spoofing.png

36 WiFi JAMMING.

37 WiFi JAMMING.

38 Fake Access Points SSID: XYZ Bank

40 Fake Access Points SSID: XYZ Bank

41 Basics of Wifi Types of wireless networks Wireless Standards( series) Encryp.on Algorithms Wireless hacking methodology ATTACKS(commonly encountered) Staying secure(defense) Security Tools

42 Defense against WPA / WPA2 akacks Extremely Complicated keys can help Passphrase should not one from dic.onary, so use uncommon- senseless words. Key should be more than 20 chars with combina.on of special chars, numbers, alphabets. Change them at regular intervals.

44 Security Checkboxes 1. WPA instead of WEP 2. WPA2 Enterprise implementa.on 3. Place AP at secured loca.on. 4. Centralized authen.ca.on & Update Drivers regularly. 5. Changing default SSID aler Configuring WLAN 6. Firewall policies & Router access Password

45 Security Checkboxes(contd ) 1. MAC add. Filtering 2. Encryp.on at Access Point 3. Packet Filtering between AP 4. Network Strength configura.on. 5. Use Ipsec s for encryp.on on WLANS 6. Check out for Rogue Access Points

46 Wi- Fi Security Audi.ng Tools AirMagnet Wifi Analyzer AirDefense Adap.ve wireless IPS ARUBA RF Protect WIPS And many others

48 Ques.ons? What you want to ask, many already have that same ques.on on their mind. Be bold and lead OK, if you don t want to speak and keep shut and keep thinking about it in your mind and take those ques.ons home, make sure you those to us and sleep well at night!

49 What should be our topic for the next meet? I hate to ask but, how can we make this beker?

Wireless Network Security

Wireless Network Security Why wireless? Wifi, which is short for wireless fi something, allows your computer to connect to the Internet using magic. -Motel 6 commercial 2 but it comes at a price Wireless