book

Wireless Network Security, 2nd Edition

Name: Wireless Network Security, 2nd Edition
Author: Wolfgang Osterhage
ISBN: 9781351603942

by Wolfgang Osterhage

May 2018

Intermediate to advanced

202 pages

4h 25m

English

CRC Press

Read now

Unlock full access

Cover
Halftitle
Title Page
Copyright Page
Table of Contents
Preface
Abbreviations
1 Introduction
2 Network Security
2.1 Introduction2.2 Weaknesses in Network Security2.3 Relevant Resources2.3.1 Danger Potentials2.4 Objectives of a Security Strategy2.5 Security Aspects Concerning the Internet
3 WLAN
3.1 WLAN Basic Principles3.1.1 Advantages of Wireless Networks3.1.1.1 Mobility and Portability3.1.1.2 Security3.1.2 General Features of Wireless Networks3.1.2.1 Radio Frequencies Available3.1.3 Standards [5,6,7,8]3.1.3.1 ISO and 802.113.1.3.2 PHY3.1.3.3 Connection Control3.1.3.4 MAC [10]3.1.3.5 WLAN as Part of LAN3.1.4 Connecting to Computers3.1.4.1 802.11 and ISM3.1.5 Antennas3.1.5.1 Antenna Types and Antenna Gain3.2 IEEE 802.11 Overview3.2.1 The Standard 802.11 and its Extensions3.2.1.1 802.113.2.1.1 802.11a3.2.1.2 802.11b3.2.1.4 802.11d3.2.1.5 802.11g3.2.1.6 802.11h3.2.1.7 802.11i3.2.1.8 802.11-20073.2.1.9 802.11n3.2.1.10 802.11p3.2.1.11 802.11-123.2.1.12 802.11ac3.2.1.13 802.11ad3.2.1.14 802.11ah3.2.1.15 Non Standard Versions3.2.1.16 Alternative Standards3.3 Wireless Fidelity3.3.1 Wi-Fi Protected Access3.4 WMAN3.5 Key Terminology3.5.1 WLAN Components3.5.1.1 Access Points3.5.2 Bandwidth3.5.3 Range3.5.4 Channels3.5.5 Channel Separation3.6 Architecture and Components3.6.1 Data Transmission and Synchronization3.6.1.1 Networks and Routers3.6.1.2 Packet Switching3.6.2 Network Topologies3.6.3 Special Aspects3.6.3.1 Modulation and Demodulation3.6.4 WLAN Architectures3.6.4.1 Cells and Stations3.6.4.2 Ad hoc Networks3.6.4.3 Infrastructure Networks3.6.4.4 Mobil Internet Access3.6.4.5 Hotspots3.6.4.6 Open Networks3.6.4.7 Roaming3.6.5 WLAN Components3.6.5.1 Adapters3.6.5.2 Access Points3.6.6 Configuring a WLAN3.6.6.1 Drivers3.6.6.2 Hardware and Configuration3.7 Security Requirements3.7.1 Assuring Availability3.7.2 Assuring Data Integrity3.7.3 Assuring Authenticity3.7.4 Assuring Confidentiality3.7.5 Security Risks3.7.5.1 Spying3.7.5.2 Decoding3.7.6 The Physical Layer3.7.6.1 Spread Spectrum3.7.7 Medium Access Layer3.7.7.1 Frames and Fragmentation3.7.7.2 Avoidance of Collisions3.7.7.3 MAC Addresses3.7.7.4 SSID Network Name3.7.7.5 Authentication Procedures3.7.7.6 Better WEP than No Protection at All3.7.7.7 WPA and WPA23.7.7.8 802.1x [61]3.8 Recent Developments3.8.1 White Spaces3.8.2 Mobile Hotspots3.9 Applications3.9.1 A Small Home WLAN3.9.2 Hot Spot Services3.9.3 WLAN Solutions for a Hospital3.10 Checklist

4 Mobile Phones
4.1 Context4.2 Basic Principles4.2.1 Communication Structure4.2.2 Device Architecture4.2.3 Smartphones4.2.4 iPhone4.2.5 BlackBerry4.3 Communication Protocols4.3.1 GMS4.3.1.1 HSCSD [76]4.3.2 GPRS4.3.3 UMTS4.3.3.1 HSDPA [77]4.4 Services4.4.1 SMS/EMS/MMS4.4.2 WAP [79]4.4.3 i-mode [80]4.5 Mobile Phones and WLAN4.5.4 Infrastructure4.5.1 Terminal Devices4.6 Threats and Protection4.6.1 General Risk Potentials and Strategic Countermeasures4.6.1.1 General Organisational Measures4.6.1.2 General Technical Measures4.6.2 Specific Threat Scenarios Concerning Mobile Phones4.6.2.1 Attacker in Possession of the Device4.6.2.2 Attacker Does Not Possess the Device4.6.3 General Precautionary Measures4.6.3.1 Data4.6.3.2 Data Encryption4.6.3.3 Firewalls4.6.3.4 Encryption on the Device4.6.3.5 Backup4.6.3.6 The e-commerce Risk4.7 Special Case Blackberry4.7.1 The Overall Security Concept4.7.2 Security in WLANs4.7.3 Theft or Loss of BlackBerry4.7.4 Management Platforms for BlackBerry4.8 VoIP4.8.1 Additional Security Aspects Concerning VoIP4.9 Security Check4.10 Directive4.11 Checklist
5 Bluetooth
5.1 Introduction5.2 Technical Basics5.2.1 Protocols5.2.1.1 Structure5.2.1.2 Common Protocols and Performance5.2.1.3 Features5.3 System Topology5.3.1 Topology5.3.2 Connection Set-Up5.4 Connecting to the Network5.5 Version 5.05.6 Security Aspects5.6.1 Instruments5.6.1.1 Security Operations Modes [96]5.6.1.2 Cryptographic Mechanisms5.6.1.3 Authentication5.6.1.4 Encryption5.7 Risk Potentials5.8 Countermeasures5.9 Checklist
6 Infra Red
6.1 Background6.2 IrDA6.2.1 General Considerations6.2.2 Protocol6.3 Applications6.3.1 Terminal Devices6.3.2 Preconditions6.3.3 Communicating6.3.3.1 Normal Disconnect Mode6.3.3.2 Discovery Mode6.3.3.3 Normal Response Mode6.4 Security Aspects6.5 Checklist
7 Near Field Communication [102]
7.1 Introduction7.2 Technology7.2.1 History7.3 Specifications7.3.1 Active Applications7.3.1.1 Example: Transmission of a Photo7.3.2 Technologies7.3.3 Passive Applications7.3.4 NFC Forum Specification7.3.5 Example Applications7.3.5.1 NFC Interactor7.4 Security Aspects7.5 Conclusions
8 Security Policy
8.1 Introduction8.1.1 Security Requirements8.1.2 Risks8.1.3 Measures8.2 Scope8.2.1 Normative References8.2.1.1 Legal Regulations8.2.1.2 Guidelines and Standards8.2.1.3 Standard ISO/IEC 13335 [106]8.2.1.4 Standard ISO/IEC 17799 [107]8.2.1.5 Standard 27001 [108]8.3 Information and Communication Security8.3.1 Strategic Involvement8.3.2 Security Organisation8.3.3 Approval Process8.3.4 Confidentiality8.4 Physical Security8.4.1 Objects8.4.2 Access8.4.3 Threats8.4.4 Equipment8.4.5 Utility Services8.4.6 Disposal8.5 Documentation8.5.1 Processes8.5.2 Commitment8.5.2.1 Non-compliance8.5.2.2 Acknowledgement of Instructions/Sample8.6 Wireless Security8.7 Summary
9 Emergency Management in Communication Networks
9.1 Emergency Management Systems9.1.1 Why Emergency Management?9.1.2 What is Emergency Management?9.2 Standards9.2.1 ISO 22301[110]9.2.2 Further Standards and Methodologies Concerning IT Security9.3 Requirements for Businesses9.3.1 Analysis before Planning9.3.2 Management Responsibilities9.4 BCM Overview9.4.1 Phases and Steps of BCM Realisation9.4.2 Business Impact Analysis (BIA)9.4.2.1 BIA and Risks9.4.3 Business Continuity Strategy in a Nutshell9.5 Training and Testing9.6.1 Guideline9.7 Intermediate Conclusions9.7.1 Continuation of Business Processes9.7.2 Step Sequence9.8 The Emergency Process9.8.1 Conception and Planning9.8.1.1 Scope9.8.1.2 Other Requirements9.8.1.3 Roles9.8.2 Step Sequence
10. References
Index

Content preview from Wireless Network Security, 2nd Edition

Near Field Communication [102]

Near field capable devices, such as tablets and smartphones are sold everywhere today but seldom used for this purpose. The feature “Tap and Send” is the one mostly employed. For this to function one has to approach two devices in a way that their NFC-antennas touch each other or stay separated for just a few centimetres. The receiving device offers according to different apps selected information, triggers an app or executes a data transfer. This can be controlled by “accept” or “reject” functions.

7.2 Technology

7.2.1 History

The Near Field Technology is based on the RFID (Radio Frequency Identification) used in goods security systems in the seventies of the last century. RFID very ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Wireless Network Security A Beginner's Guide

Publisher Resources

ISBN: 9781351603942

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills