book

CWSP® Certified Wireless Security Professional Official: Study Guide

Name: CWSP® Certified Wireless Security Professional Official: Study Guide
ISBN: 9780470438916

by David D. Coleman, David A. Westcott, Bryan E. Harkins, Shawn M. Jackman

February 2010

Intermediate to advanced

693 pages

18h 6m

English

Sybex

Read now

Unlock full access

Copyright
Dear Reader,
Acknowledgments
About the Authors
Foreword
Introduction
About CWSP® and CWNP®How to Become a CWSPWho Should Buy this Book?How to Use this Book and the CDExam ObjectivesWireless Network Attacks and Threat Assessment — 10%Monitoring, Management, and Tracking — 20%Security Design and Architecture — 50%Security Policy — 5%Fast Secure Roaming — 10%CWSP Exam TerminologyTips for Taking the CWSP Exam
Assessment Test
Answers to Assessment Test
1. WLAN Security Overview
1.1. Standards Organizations1.1.1. International Organization for Standardization (ISO)1.1.2. Institute of Electrical and Electronics Engineers (IEEE)1.1.3. Internet Engineering Task Force (IETF)1.1.4. Wi-Fi Alliance1.2. 802.11 Networking Basics1.3. 802.11 Security Basics1.3.1. Data Privacy1.3.2. Authentication, Authorization, Accounting (AAA)1.3.3. Segmentation1.3.4. Monitoring1.3.5. Policy1.4. 802.11 Security History1.4.1. 802.11i Security amendment and WPA Certifications1.4.2. Robust Security Network (RSN)1.4.3. The Future of 802.11 Security1.5. Summary1.6. Exam Essentials1.7. Key Terms1.8. Review Questions1.9. Answers to Review Questions
2. Legacy 802.11 Security
2.1. Authentication2.1.1. Open System Authentication2.1.2. Shared Key Authentication2.2. Wired Equivalent Privacy (WEP) Encryption2.3. Virtual Private Networks (VPNs)2.3.1. Point-to-Point Tunneling Protocol (PPTP)2.3.2. Layer 2 Tunneling Protocol (L2TP)2.3.3. Internet Protocol Security (IPsec)2.3.4. Configuration Complexity2.3.5. Scalability2.4. MAC Filters2.5. SSID Segmentation2.6. SSID Cloaking2.7. Summary2.8. Exam Essentials2.9. Key Terms2.10. Review Questions2.11. Answers to Review Questions
3. Encryption Ciphers and Methods
3.1. Encryption Basics3.1.1. Symmetric and Asymmetric Algorithms3.1.2. Stream and Block Ciphers3.1.3. RC43.1.4. RC53.1.5. DES3.1.6. 3DES3.2. AES3.3. WLAN Encryption Methods3.4. WEP3.4.1. WEP MPDU3.5. TKIP3.5.1. TKIP MPDU3.6. CCMP3.6.1. CCMP MPDU3.7. WPA/WPA23.8. Proprietary Layer 2 Implementations3.9. Summary3.10. Exam Essentials3.11. Key Terms3.12. Review Questions3.13. Answers to Review Questions

4. Enterprise 802.11 Layer 2 Authentication Methods
4.1. WLAN Authentication Overview4.2. AAA4.2.1. Authentication4.2.2. Authorization4.2.3. Accounting4.3. 802.1X4.3.1. Supplicant4.3.2. Authenticator4.3.3. Authentication Server4.4. Supplicant Credentials4.4.1. Usernames and Passwords4.4.2. Digital Certificates and PACs4.4.3. One-time Passwords4.4.4. Smart Cards and USB Tokens4.4.5. Machine Authentication4.4.6. Preshared Keys4.4.7. Proximity Badges and RFID Tags4.4.8. Biometrics4.5. Authentication Server Credentials4.6. Shared Secret4.7. Legacy Authentication Protocols4.7.1. PAP4.7.2. CHAP4.7.3. MS-CHAP4.7.4. MS-CHAPv24.8. EAP4.8.1. Weak EAP Protocols4.8.2. EAP-MD54.8.3. EAP-LEAP4.8.4. Strong EAP Protocols4.8.5. EAP-PEAP4.8.5.1. Phase 14.8.5.2. Phase 24.8.5.3. EAP-PEAPv0 (EAP-MSCHAPv2)4.8.5.4. EAP-PEAPv0 (EAP-TLS)4.8.5.5. EAP-PEAPv1 (EAP-GTC)4.8.6. EAP-TTLS4.8.7. EAP-TLS4.8.8. EAP-FAST4.8.8.1. PACs4.8.9. Miscellaneous EAP Protocols4.8.10. EAP-SIM4.8.11. EAP-AKA4.9. Summary4.10. Exam Essentials4.11. Key Terms4.12. Review Questions4.13. Answers to Review Questions
5. 802.11 Layer 2 Dynamic Encryption Key Generation
5.1. Advantages of Dynamic Encryption5.2. Robust Security Network (RSN)5.2.1. RSN Information Element5.2.2. Authentication and Key Management (AKM)5.2.3. RSNA Key Hierarchy5.2.4. Master Session Key (MSK)5.2.5. Master Keys5.2.6. Temporal Keys5.2.7. 4-Way Handshake5.2.8. Group Key Handshake5.2.9. PeerKey Handshake5.2.10. RSNA Security Associations5.2.11. Passphrase-to-PSK Mapping5.2.12. Roaming and Dynamic Keys5.3. Summary5.4. Exam Essentials5.5. Key Terms5.6. Review Questions5.7. Answers to Review Questions
6. SOHO 802.11 Security
6.1. WPA/WPA2-Personal6.1.1. Preshared Keys (PSK) and Passphrases6.1.2. WPA/WPA2-Personal Risks6.1.3. Entropy6.1.4. Proprietary PSK6.2. Wi-Fi Protected Setup (WPS)6.2.1. WPS Architecture6.2.1.1. Security Setup Options6.2.1.2. Registration Protocol6.2.1.2.1. In-band Configuration Mode6.2.1.2.2. Out-of-Band Configuration Mode6.2.1.2.3. Guidelines and Requirements for PIN Values6.2.1.3. Initial WLAN Setup6.2.1.4. Example WPS Push-Button Scenario6.2.1.5. WPS Push-Button Enrollee Addition6.3. SOHO Security Best Practices6.4. Summary6.5. Exam Essentials6.6. Key Terms6.7. Review Questions6.8. Answers to Review Questions
7. 802.11 Fast Secure Roaming
7.1. History of 802.11 Roaming7.1.1. Client Roaming Thresholds7.1.2. AP-to-AP Handoff7.2. RSNA7.2.1. PMKSA7.2.2. PMK Caching7.2.2.1. Preauthentication7.3. Opportunistic Key Caching (OKC)7.4. Proprietary FSR7.5. Fast BSS Transition (FT)7.5.1. Information Elements7.5.2. FT Initial Mobility Domain Association7.5.3. Over-the-Air Fast BSS Transition7.5.4. Over-the-DS Fast BSS Transition7.6. 802.11k7.7. Voice Personal and Voice Enterprise7.8. Layer 3 Roaming7.9. Troubleshooting7.10. SCA Roaming7.11. Exam Essentials7.12. Key Terms7.13. Review Questions7.14. Answers to Review Questions
8. Wireless Security Risks
8.1. Unauthorized Rogue Access8.1.1. Rogue Devices8.1.2. Rogue Prevention8.2. Eavesdropping8.2.1. Casual Eavesdropping8.2.2. Malicious Eavesdropping8.2.3. Eavesdropping Risks8.2.4. Eavesdropping Prevention8.2.5. Authentication Attacks8.3. Denial-of-Service Attacks8.3.1. Layer 1 DoS Attacks8.3.2. Layer 2 DoS Attacks8.3.3. MAC Spoofing8.3.4. Wireless Hijacking8.3.5. Encryption Cracking8.3.6. Peer-to-Peer Attacks8.3.7. Management Interface Exploits8.3.8. Vendor Proprietary Attacks8.3.9. Physical Damage and Theft8.3.10. Social Engineering8.4. Public Access and WLAN Hotspots8.5. Summary8.6. Exam Essentials8.7. Key Terms8.8. Review Questions8.9. Answers to Review Questions
9. Wireless LAN Security Auditing
9.1. WLAN Security Audit9.1.1. OSI Layer 1 Audit9.1.2. OSI Layer 2 Audit9.1.3. Penetration Testing9.1.4. Wired Infrastructure Audit9.1.5. Social Engineering Audit9.1.6. WIPS Audit9.1.7. Documenting the Audit9.1.8. Audit Recommendations9.2. WLAN Security Auditing Tools9.2.1. Linux-Based Tools9.2.2. Windows-Based Tools9.3. Summary9.4. Exam Essentials9.5. Key Terms9.6. Review Questions9.7. Answers to Review Questions
10. Wireless Security Monitoring
10.1. Wireless Intrusion Detection and Prevention Systems (WIDS and WIPS)10.1.1. WIDS/WIPS Infrastructure Components10.1.2. WIDS/WIPS Architecture Models10.1.3. Multiple Radio Sensors10.1.4. Sensor Placement10.2. Device Classification10.2.1. Rogue Detection10.2.2. Rogue Mitigation10.2.3. Device Tracking10.3. WIDS/WIPS Analysis10.3.1. Signature Analysis10.3.2. Behavioral Analysis10.3.3. Protocol Analysis10.3.4. Spectrum Analysis10.3.5. Forensic Analysis10.3.6. Performance Analysis10.4. Monitoring10.4.1. Policy Enforcement10.4.2. Alarms and Notification10.4.3. False Positives10.4.4. Reports10.5. 802.11n10.6. Proprietary WIPS10.6.1. Cloaking10.6.2. Management Frame Protection10.7. 802.11w10.8. Summary10.9. Exam Essentials10.10. Key Terms10.11. Review Questions10.12. Answers to Review Questions
11. VPNs, Remote Access, and Guest Access Services
11.1. VPN Technology in 802.11 WLAN Architecture11.1.1. VPN 10111.1.2. VPN Client11.1.3. WLAN Controllers: VPN Server for Client Access11.1.4. VPN Client Security at Public Hotspots11.1.5. Controller-to-Controller VPNs and Site-to-Site VPNs11.1.6. VPNs Used to Protect Bridge Links11.2. Remote Access11.2.1. Remote AP11.2.1.1. RAP Tunneling11.2.1.2. RAP Bridging11.2.1.3. RAP Split Tunneling11.2.2. Virtual Branch Office Networking11.3. Hotspots/Public Access Networks11.3.1. Captive Portal11.3.1.1. Features11.3.1.2. Segmentation11.3.1.3. User-Based Authentication Methods11.4. Summary11.5. Exam Essentials11.6. Key Terms11.7. Review Questions11.8. Answers to Review Questions
12. WLAN Security Infrastructure
12.1. WLAN Architecture Capabilities Overview12.1.1.12.1.1.1. Integration Service (IS)12.1.2. Distribution System (DS)12.1.3. Autonomous APs12.1.4. WLAN Controllers12.1.5. Split MAC12.1.6. Mesh12.1.7. WLAN Bridging12.1.8. Cooperative Control12.1.8.1. Dynamic Frequency Selection12.1.8.2. Dynamic RF12.1.9. Location-Based Access Control12.1.10. Hot Standby/Failover12.2. Device Management12.2.1. Protocols for Management12.2.1.1. SNMP12.2.1.1.1. Components12.2.1.1.2. Structure of Management Information12.2.1.1.3. Versions and Differences12.2.1.1.4. SNMPv112.2.1.1.5. SNMPv212.2.1.1.6. SNMPv312.2.1.2. CLI-Based Management12.2.1.2.1. Serial and Console Ports12.2.1.2.2. Telnet12.2.1.2.3. Secure Shell12.2.1.3. HTTPS12.2.2. CAPWAP and LWAPP12.2.3. Wireless Network Management System12.3. RADIUS/LDAP Servers12.3.1. Proxy Services12.3.2. Features and Components12.3.2.1. Attribute-Value Pairs12.3.2.2. Vendor-Specific Attributes12.3.2.3. Dynamic VLAN Assignment12.3.2.4. Proxy of User Databases12.3.2.5. Proxy of a Proxy (Realm)12.3.3. Integration12.3.3.1. LDAP12.3.3.2. Active Directory12.3.3.3. SQL Databases12.3.4. EAP Type Selection12.3.5. Deployment Architectures and Scaling12.3.5.1. Single-Site Deployment12.3.5.2. Distributed Autonomous Sites12.3.5.3. Distributed Sites, Centralized Authentication, and Security12.3.5.4. Distributed Sites and Security, Centralized Authentication12.3.5.5. Built-in RADIUS Servers12.3.6. RADIUS Failover12.3.7. Timer Values12.3.7.1. EAP Timers12.3.7.2. EAP Request12.3.7.3. EAP Identity Request12.3.7.4. RADIUS Timers12.3.7.5. RADIUS Authentication Retransmission Timeout12.3.7.6. AP-Based Timers12.3.7.7. Session Timeout12.3.7.8. Inactivity Timer12.3.8. WAN Traversal12.3.9. Multifactor Authentication Servers12.4. Public Key Infrastructure (PKI)12.4.1.12.4.1.1. Self-Signed Certificates12.4.1.2. Enterprise PKI12.5. Role-Based Access Control12.5.1.12.5.1.1. Role Assignment12.5.1.2. Built-in/Integrated Firewalls12.5.1.3. ACLs12.5.1.4. Network Access Control (NAC)12.6. Enterprise Encryption Gateways12.7. Summary12.8. Exam Essentials12.9. Key Terms12.10. Review Questions12.11. Answers to Review Questions
13. Wireless Security Policies
13.1. General Policy13.1.1. Policy Creation13.1.2. Policy Management13.2. Functional Policy13.2.1. Password Policy13.2.2. RBAC Policy13.2.3. Change Control Policy13.2.4. Authentication and Encryption Policy13.2.5. WLAN Monitoring Policy13.2.6. Endpoint Policy13.2.7. Acceptable Use Policy13.2.8. Physical Security13.2.9. Remote Office Policy13.3. Government and Industry Regulations13.3.1. The US Department of Defense (DoD) Directive 8100.213.3.2. Federal Information Processing Standards (FIPS) 140-213.3.3. The Sarbanes-Oxley Act of 2002 (SOX)13.3.4. Health Insurance Portability and Accountability Act (HIPAA)13.3.5. Payment Card Industry (PCI) Standard13.3.6. Compliance Reports13.4. 802.11 WLAN Policy Recommendations13.5. Summary13.6. Exam Essentials13.7. Key Terms13.8. Review Questions13.9. Answers to Review Questions
A. Abbreviations, Acronyms, and Regulations
A.1.A.1.1. CertificationsA.1.2. Organizations and RegulationsA.1.3. MeasurementsA.1.4. Technical TermsA.2. Power RegulationsA.2.1. 2.4 GHz ISM Point-to-Multipoint (PtMP) CommunicationsA.2.2. 5 GHz UNII Point-to-Multipoint (PtMP) CommunicationsA.2.3. 2.4 GHz ISM Point-to-Point (PtP) CommunicationsA.2.4. 5 GHz UNII Point-to-Point (PtP) CommunicationsA.2.5. Windows Registry Values that Control Preauthentication and PMK Caching
B. WLAN Vendors
B.1. WLAN InfrastructureB.2. WLAN Mesh InfrastructureB.3. WLAN Auditing, Diagnostic, and Design SolutionsB.4. WLAN ManagementB.5. WLAN Security SolutionsB.6. VoWiFi SolutionsB.7. WLAN Fixed Mobile ConvergenceB.8. WLAN RTLS SolutionsB.9. WLAN SOHO Vendors
C. About the Companion CD
C.1. What You'll Find on the CDC.1.2. Sybex Test EngineC.1.3. Electronic FlashcardsC.2. System RequirementsC.3. Using the CDC.4. TroubleshootingC.4.1. Customer Care
Glossary

Overview

Sybex is now the official publisher for Certified Wireless Network Professional, the certifying vendor for the CWSP program. This guide covers all exam objectives, including WLAN discovery techniques, intrusion and attack techniques, 802.11 protocol analysis. Wireless intrusion-prevention systems implementation, layer 2 and 3 VPNs used over 802.11 networks, and managed endpoint security systems. It also covers enterprise/SMB/SOHO/Public-Network Security design models and security solution implementation, building robust security networks, wireless LAN management systems, and much more.

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

CWNA: Certified Wireless Network Administrator Official Study Guide: Exam PW0-105, 3rd Edition

CWNA Certified Wireless Network Administrator & CWSP Certified Wireless Security Professional All-in-One Exam Guide (PW0-104 & PW0-204)

Tom Carpenter

Publisher Resources

ISBN: 9780470438916Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills