book

Wireless and Mobile Device Security

Name: Wireless and Mobile Device Security
Author: Jim Doherty
ISBN: 9781284059281

by Jim Doherty

December 2014

Intermediate to advanced

394 pages

12h 50m

English

Jones & Bartlett Learning

Read now

Unlock full access

Cover
Title Page
Copyright
Contents
Dedication
Preface
Acknowledgments
Part One Introduction to Wireless and Mobile Networks
Chapter 1 The Evolution of Data Networks
The Dawn of Data CommunicationEarly Data NetworksThe Internet RevolutionAdvances in Personal ComputersMobile Phones and the Creation of the Other New NetworkComputers Go MobileThe Convergence of Mobile and Data NetworksBusiness Challenges Addressed by Wireless NetworkingIP MobilityThe Impact of Bring Your Own DeviceCommon Operating EnvironmentBYOD: An IT Perspective and PolicyThe Basic Tenets of Network SecurityThe Evolution of CybercrimeWireless Network SecurityMobile IP SecurityChapter SummaryKey Concepts and TermsChapter 1 Assessment
Chapter 2 The Evolution of Wired Networking to Wireless Networking
Networking and the Open System Interconnection Reference ModelThe Seven Layers of the OSI Reference ModelCommunicating over a NetworkThe Data Link LayerThe Physical LayerFrom Wired to WirelessThe Economic Impact of Wireless NetworkingWireless Networking and the Way People WorkHealth CareWarehousing and LogisticsRetailGeneral Business and Knowledge WorkersThe Wi-Fi MarketHow Wi-Fi Affects Developing NationsThe Internet of ThingsChapter SummaryKey Concepts and TermsChapter 2 Assessment

Chapter 3 The Mobile Revolution
Introduction to Cellular or Mobile CommunicationCellular Coverage MapsFrequency SharingCellular HandoffThe Evolution of Mobile NetworksAMPS 1GGSM and CDMA 2GGPRS and EDGE3G Technology4G and LTEBYOD and the BlackBerry EffectThe Economic Impact of Mobile IPThe Business Impact of MobilityBusiness Use CasesAny Business Involving the Moving of People or ThingsDelivery (Drop Off) Loss MitigationInformation DisseminationEnterprise Business Management ApplicationsChapter SummaryKey Concepts and TermsChapter 3 Assessment
Chapter 4 Security Threats Overview: Wired, Wireless, and Mobile
What to Protect?General Threat CategoriesConfidentialityIntegrityAvailabilityAccountabilityNonrepudiationThreats to Wireless and Mobile DevicesData Theft ThreatsDevice Control ThreatsSystem Access ThreatsRisk MitigationMitigating the Risk of BYODBYOD for Small-to-Medium BusinessesDefense in DepthAuthorization and Access ControlAAAInformation Security StandardsISO/IEC 27001:2013ISO/IEC 27002:2013NIST SP 800-53Regulatory ComplianceThe Sarbanes-Oxley ActThe Gramm-Leach-Bliley ActThe Health Insurance Portability and Accountability Act and the Health Information Technology for Economic and Clinical Health ActThe Payment Card Industry Data Security StandardDetrimental Effects of RegulationsChapter SummaryKey Concepts and TermsChapter 4 Assessment
Part Two WLAN Security
Chapter 5 How Do WLANs Work?
WLAN TopologiesWireless Client Devices802.11 Service SetsThe 802.11 Standards802.11 Unlicensed BandsNarrowband and Spread SpectrumMultipathFrequency Hopping Spread SpectrumDirect Sequence Spread SpectrumWireless Access PointsHow Does a WAP Work?WAP ArchitectureWireless BridgesWireless Workgroup BridgesResidential GatewaysEnterprise GatewaysWireless AntennasOmnidirectional AntennasSemi-Directional AntennasHighly Directional AntennasMIMO AntennasDetermining Coverage AreaSite SurveysSpectrum and Protocol AnalysisChapter SummaryKey Concepts and TermsChapter 5 Assessment
Chapter 6 WLAN and IP Networking Threat and Vulnerability Analysis
Types of AttackersSkilled Versus Unskilled AttackersInsiders Versus OutsidersTargets of Opportunity Versus Specific TargetsScouting for a Targeted AttackPhysical Security and Wireless NetworksSocial EngineeringWardrivingRogue Access PointsRogue AP VulnerabilitiesEvil TwinsBluetooth Vulnerabilities and ThreatsBluejackingBluesnarfingBluebuggingIs Bluetooth Vulnerable?Packet AnalysisWireless Networks and Information TheftMalicious Data Insertion on Wireless NetworksDenial of Service AttacksPeer-to-Peer Hacking over Ad Hoc NetworksWhen an Attacker Gains Unauthorized ControlChapter SummaryKey Concepts and TermsChapter 6 Assessment
Chapter 7 Basic WLAN Security Measures
Design and Implementation Considerations for Basic SecurityRadio Frequency DesignEquipment Configuration and PlacementInteroperability and LayeringSecurity ManagementAuthentication and Access RestrictionSSID ObfuscationMAC FiltersAuthentication and AssociationVPN over WirelessVirtual Local Area NetworksData ProtectionWired Equivalent PrivacyWi-Fi Protected AccessWi-Fi Protected Access 2Ongoing Management Security ConsiderationsFirmware UpgradesPhysical SecurityPeriodic InventoryIdentifying Rogue WLANs/Wireless Access PointsChapter SummaryKey Concepts and TermsChapter 7 Assessment
Chapter 8 Advanced WLAN Security Measures
Establishing and Enforcing a Comprehensive Security PolicyCentralized Versus Distributed Design and ManagementRemote Access PoliciesGuest PoliciesQuarantiningCompliance ConsiderationsEmployee Training and EducationImplementing Authentication and Access ControlExtensible Authentication ProtocolRemote Authentication Dial-In User ServiceIntrusion Detection Systems and Intrusion Prevention SystemsProtocol FilteringAuthenticated Dynamic Host Configuration ProtocolData ProtectionWPA2 Personal and Enterprise ModesInternet Protocol SecurityVirtual Private NetworksMalware and Application SecurityUser SegmentationVirtual Local Area NetworksGuest Access and PasswordsDemilitarized Zone SegmentationManaging Network and User DevicesSimple Network Management Protocol Version 3Discovery ProtocolsIP ServicesCoverage Area and Wi-Fi RoamingClient Security Outside the PerimeterDevice Management and Use LogonsHard Drive EncryptionQuarantiningChapter SummaryKey Concepts and TermsChapter 8 Assessment
Chapter 9 WLAN Auditing Tools
WLAN Discovery ToolsNetStumbler and InSSIDerKismetHeatMapperPenetration Testing ToolsMetasploitSecurity Auditor’s Research AssistantPassword-Capture and Decryption ToolsNetwork EnumeratorsNetwork Management and Control ToolsWireless Protocol AnalyzersAircrack-ngAirsharkNetwork Management SystemWLAN Hardware Audit Tools and AntennasHardware Audit ToolsAntennasAttack Tools and TechniquesRadio Frequency JammingDenial of ServiceHijacking DevicesHijacking a SessionNetwork UtilitiesChapter SummaryKey Concepts and TermsChapter 9 Assessment
Chapter 10 WLAN and IP Network Risk Assessment
Risk AssessmentRisk Assessment on WLANsOther Types of Risk AssessmentIT Security ManagementMethodologyLegal RequirementsOther Justifications for Risk AssessmentsSecurity Risk Assessment StagesPlanningInformation GatheringRisk AnalysisIdentifying and Implementing ControlsMonitoringSecurity AuditsChapter SummaryKey Concepts and TermsChapter 10 Assessment
Part Three Mobile Security
Chapter 11 Mobile Communication Security Challenges
Mobile Phone Threats and VulnerabilitiesExploits, Tools, and TechniquesGoogle Android Security ChallengesCriticism of AndroidAndroid Exploitation ToolsAndroid Security ArchitectureAndroid Application ArchitectureGoogle PlayApple iOS Security ChallengesApple iOS ExploitsApple iOS ArchitectureThe App StoreWindows Phone Security ChallengesWindows Phone OS ExploitsWindows Phone Security ArchitectureWindows Phone ArchitectureWindows StoreChapter SummaryKey Concepts and TermsChapter 11 Assessment
Chapter 12 Mobile Device Security Models
Google Android SecurityThe Android Security ModelThe Android SandboxFile-System PermissionsAndroid SDK Security FeaturesRooting and Unlocking DevicesAndroid Permission ModelApple iOS SecurityThe Apple Security ModelApplication ProvenanceiOS SandboxSecurity ConcernsPermission-Based AccessEncryptionJailbreaking iOSWindows Phone 8 SecurityPlatform Application SecuritySecurity FeaturesSecure BootSystem App IntegritySecuring AppsWindows Phone Security IssuesSecurity Challenges of Handoff-Type FeaturesBYOD and SecuritySecurity Using Enterprise Mobility ManagementMobile Device ManagementMobile Application ManagementChapter SummaryKey Concepts and TermsChapter 12 Assessment
Chapter 13 Mobile Wireless Attacks and Remediation
Scanning the Corporate Network for Mobile AttacksSecurity AwarenessScanning the Network: What to Look ForScanning for VulnerabilitiesThe Kali Linux Security PlatformScanning with Airodump-ngClient and Infrastructure ExploitsClient-Side ExploitsOther USB ExploitsNetwork ImpersonationNetwork Security Protocol ExploitsRADIUS ImpersonationPublic Certificate Authority ExploitsDeveloper Digital CertificatesBrowser Application and Phishing ExploitsCaptive PortalsDrive-By Browser ExploitsMobile Software Exploits and RemediationWeak Server-Side SecurityUnsecure Data StorageInsufficient Transport Layer ProtectionUnintended Data LeakagePoor Authorization and AuthenticationBroken CryptographyClient-Side InjectionSecurity Decisions via Untrusted InputsImproper Session HandlingLack of Binary ProtectionsChapter SummaryKey Concepts and TermsChapter 13 Assessment
Chapter 14 Fingerprinting Mobile Devices
Is Fingerprinting a Bad or a Good Thing?Types of FingerprintingNetwork Scanning and Proximity FingerprintingOnline or Remote FingerprintingFingerprinting MethodsPassive FingerprintingActive FingerprintingUnique Device IdentificationApple iOSAndroidHTTP HeadersNew Methods of Mobile FingerprintingSpyware for Mobile DevicesSpy SoftwareSpy Cells: StingrayChapter SummaryKey Concepts and TermsChapter 14 Assessment
Chapter 15 Mobile Malware and Application-Based Threats
Malware on Android DevicesCriminal and Developer CollaborationMadwareExcessive Application PermissionsMalware on Apple iOS DevicesMalware on Windows Phone DevicesMobile Malware Delivery MethodsMobile Malware and Social EngineeringCaptive PortalsDrive-By AttacksClickjackingLikejackingPlug-and-Play ScriptsMitigating Mobile Browser AttacksMobile Malware DefenseMobile Device ManagementPenetration Testing and SmartphonesChapter SummaryKey Concepts and TermsChapter 15 Assessment
Appendix A Answer Key
Appendix B Standard Acronyms
Glossary of Key Terms
References
Index

Overview

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781284059274

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills