Introduction to Wireless Security

You installed a new Wireless Local Area Network (WLAN) network from your home or office.
Access Point is "up and running," the only thing you have to do is turn on a PC (desktop or laptop) and connect to the AP, and through him to the Internet anywhere within range of your AP.

Sit in your favorite cafe, drink coffee and surf on your laptop on line at the HotSpot.

At the airport you're waiting for the plane and what will you do? Sure to draw your laptop, check emails, surf the net, check out Facebook.

If you have a cell phone with WLAN thing is even simpler. I do not even need to carry laptop.

Is the WLAN is great thing, do not have to bother with cables, just plug in a WLAN card and this is it.

But are you are thinking about the security? Do you have good protection for your local network from their neighbors and others who would be hooked to the Internet to your account? What if you deliberately or accidentally injecting any virus, worm or malicious use your information, and even destroy them.

And what's with the merger of the major hotspot in your favorite coffee shop, airport, library ...
Are you sure you carefree surf, check emails and check the face? Especially if you send business mail and information that you do not trust anyone.

This talk will cover these cases and of course all of your questions and situations that are encountered, will be glad if we do say so to process.

At the beginning, you wanted to explain basic concepts in WLAN security.

WEP (Wired Equivalent Privacy) is never justified it by name - that is, privacy security as the fixed networks.

In response to the weak WEP encryption, in October 2003, Wi-Fi Alliance has released WPA.
WPA - Wi-Fi Access Proteced. A year later, Wi-Fi Alliance released WPA2 enhanced.
WPA/WPA2 we first divided into groups of two bases:

1) Enterprise
2) Personal

The main difference is in the application. WPA Personal is for use in SOHO environments.
SOHO - Small Office Home Office - is used in small offices and private flats / houses. Enterprise is as the name says, for use in larger organizations.
In addition to the application site was the difference in performance. In Enterprise version is used for RADIUS authentication server, while the personal version of the Radius server in the Access Point.

Further division of the WPA is the following:

1) WPA-Personal
2) WPA2-Personal
3) WPA-Enterprise
4) WPA2-Enterprise

In the following table you will see with different methods of authentication and encryption for WPA/WPA2 4 groups:

WPA WPA2
Enterprise mode Authentication:802.1X/EAP Authentication:802.1X/EAP
Encryption: TKIP/MIC Encryption: AES-CCMP

Personal mode Authentication:PSK Authentication:PSK
Encryption: TKIP/MIC Encryption: AES-CCMP

Radius server is used for AAA. AAA is abbreviations for Authentication Authorization and Accounting.
When you connect your laptop to the AP, the AP will forward the login parameters via the RADIUS protocol to the Radius server. Radius server will tell the AP whether the computer will connect to the WLAN network.