book

Wireless Network Security, 2nd Edition

by Wolfgang Osterhage

May 2018

Intermediate to advanced

202 pages

4h 25m

English

CRC Press

Read now

Unlock full access

2.1 Introduction2.2 Weaknesses in Network Security2.3 Relevant Resources2.3.1 Danger Potentials2.4 Objectives of a Security Strategy2.5 Security Aspects Concerning the Internet
3.1 WLAN Basic Principles3.1.1 Advantages of Wireless Networks3.1.1.1 Mobility and Portability3.1.1.2 Security3.1.2 General Features of Wireless Networks3.1.2.1 Radio Frequencies Available3.1.3 Standards [5,6,7,8]3.1.3.1 ISO and 802.113.1.3.2 PHY3.1.3.3 Connection Control3.1.3.4 MAC [10]3.1.3.5 WLAN as Part of LAN3.1.4 Connecting to Computers3.1.4.1 802.11 and ISM3.1.5 Antennas3.1.5.1 Antenna Types and Antenna Gain3.2 IEEE 802.11 Overview3.2.1 The Standard 802.11 and its Extensions3.2.1.1 802.113.2.1.1 802.11a3.2.1.2 802.11b3.2.1.4 802.11d3.2.1.5 802.11g3.2.1.6 802.11h3.2.1.7 802.11i3.2.1.8 802.11-20073.2.1.9 802.11n3.2.1.10 802.11p3.2.1.11 802.11-123.2.1.12 802.11ac3.2.1.13 802.11ad3.2.1.14 802.11ah3.2.1.15 Non Standard Versions3.2.1.16 Alternative Standards3.3 Wireless Fidelity3.3.1 Wi-Fi Protected Access3.4 WMAN3.5 Key Terminology3.5.1 WLAN Components3.5.1.1 Access Points3.5.2 Bandwidth3.5.3 Range3.5.4 Channels3.5.5 Channel Separation3.6 Architecture and Components3.6.1 Data Transmission and Synchronization3.6.1.1 Networks and Routers3.6.1.2 Packet Switching3.6.2 Network Topologies3.6.3 Special Aspects3.6.3.1 Modulation and Demodulation3.6.4 WLAN Architectures3.6.4.1 Cells and Stations3.6.4.2 Ad hoc Networks3.6.4.3 Infrastructure Networks3.6.4.4 Mobil Internet Access3.6.4.5 Hotspots3.6.4.6 Open Networks3.6.4.7 Roaming3.6.5 WLAN Components3.6.5.1 Adapters3.6.5.2 Access Points3.6.6 Configuring a WLAN3.6.6.1 Drivers3.6.6.2 Hardware and Configuration3.7 Security Requirements3.7.1 Assuring Availability3.7.2 Assuring Data Integrity3.7.3 Assuring Authenticity3.7.4 Assuring Confidentiality3.7.5 Security Risks3.7.5.1 Spying3.7.5.2 Decoding3.7.6 The Physical Layer3.7.6.1 Spread Spectrum3.7.7 Medium Access Layer3.7.7.1 Frames and Fragmentation3.7.7.2 Avoidance of Collisions3.7.7.3 MAC Addresses3.7.7.4 SSID Network Name3.7.7.5 Authentication Procedures3.7.7.6 Better WEP than No Protection at All3.7.7.7 WPA and WPA23.7.7.8 802.1x [61]3.8 Recent Developments3.8.1 White Spaces3.8.2 Mobile Hotspots3.9 Applications3.9.1 A Small Home WLAN3.9.2 Hot Spot Services3.9.3 WLAN Solutions for a Hospital3.10 Checklist

4.1 Context4.2 Basic Principles4.2.1 Communication Structure4.2.2 Device Architecture4.2.3 Smartphones4.2.4 iPhone4.2.5 BlackBerry4.3 Communication Protocols4.3.1 GMS4.3.1.1 HSCSD [76]4.3.2 GPRS4.3.3 UMTS4.3.3.1 HSDPA [77]4.4 Services4.4.1 SMS/EMS/MMS4.4.2 WAP [79]4.4.3 i-mode [80]4.5 Mobile Phones and WLAN4.5.4 Infrastructure4.5.1 Terminal Devices4.6 Threats and Protection4.6.1 General Risk Potentials and Strategic Countermeasures4.6.1.1 General Organisational Measures4.6.1.2 General Technical Measures4.6.2 Specific Threat Scenarios Concerning Mobile Phones4.6.2.1 Attacker in Possession of the Device4.6.2.2 Attacker Does Not Possess the Device4.6.3 General Precautionary Measures4.6.3.1 Data4.6.3.2 Data Encryption4.6.3.3 Firewalls4.6.3.4 Encryption on the Device4.6.3.5 Backup4.6.3.6 The e-commerce Risk4.7 Special Case Blackberry4.7.1 The Overall Security Concept4.7.2 Security in WLANs4.7.3 Theft or Loss of BlackBerry4.7.4 Management Platforms for BlackBerry4.8 VoIP4.8.1 Additional Security Aspects Concerning VoIP4.9 Security Check4.10 Directive4.11 Checklist
5.1 Introduction5.2 Technical Basics5.2.1 Protocols5.2.1.1 Structure5.2.1.2 Common Protocols and Performance5.2.1.3 Features5.3 System Topology5.3.1 Topology5.3.2 Connection Set-Up5.4 Connecting to the Network5.5 Version 5.05.6 Security Aspects5.6.1 Instruments5.6.1.1 Security Operations Modes [96]5.6.1.2 Cryptographic Mechanisms5.6.1.3 Authentication5.6.1.4 Encryption5.7 Risk Potentials5.8 Countermeasures5.9 Checklist
6.1 Background6.2 IrDA6.2.1 General Considerations6.2.2 Protocol6.3 Applications6.3.1 Terminal Devices6.3.2 Preconditions6.3.3 Communicating6.3.3.1 Normal Disconnect Mode6.3.3.2 Discovery Mode6.3.3.3 Normal Response Mode6.4 Security Aspects6.5 Checklist
7.1 Introduction7.2 Technology7.2.1 History7.3 Specifications7.3.1 Active Applications7.3.1.1 Example: Transmission of a Photo7.3.2 Technologies7.3.3 Passive Applications7.3.4 NFC Forum Specification7.3.5 Example Applications7.3.5.1 NFC Interactor7.4 Security Aspects7.5 Conclusions
8.1 Introduction8.1.1 Security Requirements8.1.2 Risks8.1.3 Measures8.2 Scope8.2.1 Normative References8.2.1.1 Legal Regulations8.2.1.2 Guidelines and Standards8.2.1.3 Standard ISO/IEC 13335 [106]8.2.1.4 Standard ISO/IEC 17799 [107]8.2.1.5 Standard 27001 [108]8.3 Information and Communication Security8.3.1 Strategic Involvement8.3.2 Security Organisation8.3.3 Approval Process8.3.4 Confidentiality8.4 Physical Security8.4.1 Objects8.4.2 Access8.4.3 Threats8.4.4 Equipment8.4.5 Utility Services8.4.6 Disposal8.5 Documentation8.5.1 Processes8.5.2 Commitment8.5.2.1 Non-compliance8.5.2.2 Acknowledgement of Instructions/Sample8.6 Wireless Security8.7 Summary
9.1 Emergency Management Systems9.1.1 Why Emergency Management?9.1.2 What is Emergency Management?9.2 Standards9.2.1 ISO 22301[110]9.2.2 Further Standards and Methodologies Concerning IT Security9.3 Requirements for Businesses9.3.1 Analysis before Planning9.3.2 Management Responsibilities9.4 BCM Overview9.4.1 Phases and Steps of BCM Realisation9.4.2 Business Impact Analysis (BIA)9.4.2.1 BIA and Risks9.4.3 Business Continuity Strategy in a Nutshell9.5 Training and Testing9.6.1 Guideline9.7 Intermediate Conclusions9.7.1 Continuation of Business Processes9.7.2 Step Sequence9.8 The Emergency Process9.8.1 Conception and Planning9.8.1.1 Scope9.8.1.2 Other Requirements9.8.1.3 Roles9.8.2 Step Sequence