click below
click below
Normal Size Small Size show me how
Chapter 9- Security
Term | Definition |
---|---|
bluejacking | An attack that sends unsolicited messages to Bluetooh-enabled devices |
bluesnarfing | An attack that accesses unauthorized information from a wireless device through a Bluetooth connection. |
Bluetooth | A wireless technology that uses short-range radio frequency (RF) transmissions and provides rapid ad hoc device pairings |
captive portal AP | An infrastructure that is used on public access WLANs to provide a higher degree of security |
Challenge-Handshake Authentication Protocol (CHAP) | A weak authentication protocol that has been replaced by the Extensible Authentication Protocol (EAP) |
Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP) | The encryption protocol used for WPA2 that specified the use of a general-purpose cipher mode algorithm providing data privacy with AES. |
evil twin | An AP set up by an attacker to mimic an authorized AP and capture transmissions, so a user's device will unknowingly connect to this evil twin instead of the authorized AP. |
Extensible Authentication Protocol (EAP) | A framework for transporting authentication protocols that defines the format of the messages. |
initialization vector (IV) | A 24-bit value used in WEP that changes each time a packet is encrypted. |
Lightweight EAP (LEAP) | A proprietary EAP method developed by Cisco System requiring mutual authentication used for WLAN encryption using Cisco client software. |
Media Access Control (MAC) address filter | A method for controlling access to a WLAN based on the device's MAC address. |
near field communication (NFC) | A set of standards primarily for smartphones and smart cards that can be used to establish communication between devices in close proximity |
Password Authentication Protocol (PAP) | A weak authentication protocol that has been replaced by the Extensible Authentication Protocol (EAP) |
preshared key (PSK) | The authentication model used in WPA that requires a secret key value to be entered into the AP and all wireless devices prior to communicating |
Protected EAP (PEAP) | An EAP method designed to simplify the deployment of 802.1x by using Microsoft Windows logins and passwords. |
RF jamming | Intentionally flooding the radio frequency (RF) spectrum with extraneous RF signal "noise" that creates interference and prevents communications from occuring. |
rogue access point | An unauthorized AP that allows an attacker to bypass many of the network security configurations and opens the network and its users to attacks |
Service Set Identifier (SSID) | The alphanumeric user-supplied network name of a WLAN. |
site survey | An in-depth examination and analysis of a wireless LAN site |
Temporary Key Integrity Protocol (TKIP) | The WPA and WPA2 encryption technology. |
war chalking | The process of documenting and then advertising the location of wireless LANs for others to use |
war driving | Searching for wireless signals from an automobile or on foot using a portable computing device |
Wi-Fi Protected Access (WPA) | The original set of protections from the Wi-Fi Alliance designed to address both encryption and authentication. |
Wi-Fi Protected Access 2 (WPA2) | The second generation of WPA security from the Wi-Fi alliance that addresses authentication and encryption on WLANs and is currently the most secure model for Wi-Fi security. |
Wi-Fi Protected Setup (WPS) | An optional means of configuring security on wireless local area networks (WLANS) primarily intended to help users who have little or no knowledge of security to quickly and easily impliment security on their WLANS. |
Wired Equivalent Privacy (WEP) | An IEEE 802.11 security protocol designed to ensure that only authorized parties can view transmitted wireless information. WEP has significant vulnerabilities and is not considered secure. |
wireless local area network (WLAN) | A wireless network designed to replace or supplement a wireless local area network (LAN) |
wireless replay | A passive attack in which the attacker captures transmitted wireless data, records it, and then sends it on to the original recipient without the attacks presence being detected. |