https://urgentcomm.com/wp-content/themes/ucm_child/assets/images/logo/footer-new-logo.png
  • Home
  • News
  • Multimedia
    • Back
    • Multimedia
    • Video
    • Podcasts
    • Galleries
    • IWCE’s Video Showcase
    • Product Guides
  • Commentary
    • Back
    • Commentary
    • Urgent Matters
    • View From The Top
    • All Things IWCE
    • Legal Matters
  • Resources
    • Back
    • Resources
    • Webinars
    • White Papers
    • Reprints & Reuse
  • IWCE
    • Back
    • IWCE
    • Conference
    • Special Events
    • Exhibitor Listings
    • Premier Partners
    • Floor Plan
    • Exhibiting Information
    • Register for IWCE
  • About Us
    • Back
    • About Us
    • Contact Us
    • Advertise
    • Terms of Service
    • Privacy Statement
    • Cookie Policy
  • Related Sites
    • Back
    • American City & County
    • IWCE
    • Light Reading
    • IOT World Today
    • Mission Critical Technologies
    • TU-Auto
  • In the field
    • Back
    • In the field
    • Broadband Push-to-X
    • Internet of Things
    • Project 25
    • Public-Safety Broadband/FirstNet
    • Virtual/Augmented Reality
    • Land Mobile Radio
    • Long Term Evolution (LTE)
    • Applications
    • Drones/Robots
    • IoT/Smart X
    • Software
    • Subscriber Devices
    • Video
  • Call Center/Command
    • Back
    • Call Center/Command
    • Artificial Intelligence
    • NG911
    • Alerting Systems
    • Analytics
    • Dispatch/Call-taking
    • Incident Command/Situational Awareness
    • Tracking, Monitoring & Control
  • Network Tech
    • Back
    • Network Tech
    • Interoperability
    • LMR 100
    • LMR 200
    • Backhaul
    • Deployables
    • Power
    • Tower & Site
    • Wireless Networks
    • Coverage/Interference
    • Security
    • System Design
    • System Installation
    • System Operation
    • Test & Measurement
  • Operations
    • Back
    • Operations
    • Critical Infrastructure
    • Enterprise
    • Federal Government/Military
    • Public Safety
    • State & Local Government
    • Training
  • Regulations
    • Back
    • Regulations
    • Narrowbanding
    • T-Band
    • Rebanding
    • TV White Spaces
    • None
    • Funding
    • Policy
    • Regional Coordination
    • Standards
  • Organizations
    • Back
    • Organizations
    • AASHTO
    • APCO
    • DHS
    • DMR Association
    • ETA
    • EWA
    • FCC
    • IWCE
    • NASEMSO
    • NATE
    • NXDN Forum
    • NENA
    • NIST/PSCR
    • NPSTC
    • NTIA/FirstNet
    • P25 TIG
    • TETRA + CCA
    • UTC
Urgent Communications
  • NEWSLETTER
  • Home
  • News
  • Multimedia
    • Back
    • Video
    • Podcasts
    • Omdia Crit Comms Circle Podcast
    • Galleries
    • IWCE’s Video Showcase
    • Product Guides
  • Commentary
    • Back
    • All Things IWCE
    • Urgent Matters
    • View From The Top
    • Legal Matters
  • Resources
    • Back
    • Webinars
    • White Papers
    • Reprints & Reuse
    • UC eZines
    • Sponsored content
  • IWCE
    • Back
    • Conference
    • Why Attend
    • Exhibitor Listing
    • Floor Plan
    • Exhibiting Information
    • Join the Event Mailing List
  • About Us
    • Back
    • About Us
    • Contact Us
    • Advertise
    • Cookie Policy
    • Terms of Service
    • Privacy Statement
  • Related Sites
    • Back
    • American City & County
    • IWCE
    • Light Reading
    • IOT World Today
    • TU-Auto
  • newsletter
  • In the field
    • Back
    • Internet of Things
    • Broadband Push-to-X
    • Project 25
    • Public-Safety Broadband/FirstNet
    • Virtual/Augmented Reality
    • Land Mobile Radio
    • Long Term Evolution (LTE)
    • Applications
    • Drones/Robots
    • IoT/Smart X
    • Software
    • Subscriber Devices
    • Video
  • Call Center/Command
    • Back
    • Artificial Intelligence
    • NG911
    • Alerting Systems
    • Analytics
    • Dispatch/Call-taking
    • Incident Command/Situational Awareness
    • Tracking, Monitoring & Control
  • Network Tech
    • Back
    • Cybersecurity
    • Interoperability
    • LMR 100
    • LMR 200
    • Backhaul
    • Deployables
    • Power
    • Tower & Site
    • Wireless Networks
    • Coverage/Interference
    • Security
    • System Design
    • System Installation
    • System Operation
    • Test & Measurement
  • Operations
    • Back
    • Critical Infrastructure
    • Enterprise
    • Federal Government/Military
    • Public Safety
    • State & Local Government
    • Training
  • Regulations
    • Back
    • Narrowbanding
    • T-Band
    • Rebanding
    • TV White Spaces
    • None
    • Funding
    • Policy
    • Regional Coordination
    • Standards
  • Organizations
    • Back
    • AASHTO
    • APCO
    • DHS
    • DMR Association
    • ETA
    • EWA
    • FCC
    • IWCE
    • NASEMSO
    • NATE
    • NXDN Forum
    • NENA
    • NIST/PSCR
    • NPSTC
    • NTIA/FirstNet
    • P25 TIG
    • TETRA + CCA
    • UTC
acc.com

content


Wi-Fi remains a work in progress

Wi-Fi remains a work in progress

While Microsoft has caught considerable grief over Windows network security holes, it is not alone in what seems to be an industry-wide practice of leaving
  • Written by Urgent Communications Administrator
  • 1st January 2004

While Microsoft has caught considerable grief over Windows network security holes, it is not alone in what seems to be an industry-wide practice of leaving security features turned-off by default. Wi-Fi vendors also ship their equipment with simple default settings and without activating security enhancements, which could be especially problematic for enterprises and public-safety organizations.

The Black Hat Federal Briefings held in Washington, D.C., in September 2003, focused on the security weaknesses of 2.4 GHz networks. It’s a fairly simple matter for hackers to crack the wired equivalent privacy (WEP) security protocol, spoof Internet protocol addresses and forge media access control (MAC) addresses, according to Don Bailey, principal of security consultancy The Shmoo Group, who spoke at the conference. Additionally, 2.4 GHz networks legally can be jammed.

“Wi-Fi is the Wild West of networking … maybe there will be a vendor fix, but don’t count on it,” Bailey said.

Using off-the-shelf equipment and a program they wrote called Airsnarf, Bailey and colleague Bruce Potter quickly illustrated how a more powerful unauthorized rogue Wi-Fi access point (AP) could overwhelm a public wireless hot spot.

Once machines establish a connection — or “associate” — to the rogue AP, a laptop computer configured as a web server and capable of replicating popular web pages could be utilized to capture user IDs and passwords without the end user’s knowledge. A rogue AP could then be used to unleash a denial-of-service (DoS) attack on a public hot spot or corporate network, pilfer user credentials or execute an AP cloning scenario for long-term unauthorized access to a network. “Someone could pay a janitor $25 bucks to plug an AP [into a corporate network],” Bailey said. “Or a user could plug in an unauthorized AP for his convenience.”

A roaming Wi-Fi network connection typically is associated between a user’s computer and the most powerful signal source. Most off-the-shelf Wi-Fi gear emits 25 megawatts of power, but some vendors manufacture laptop cards that put out as much as 200 megawatts, Bailey said. Combined with an omni-directional antenna, a rogue AP can emit 6 watts of transmission power, which is no match for a 25-megawatt transmitter. But add an amplifier to the basic setup and the equation shifts in favor of the attacker. “A ham radio operator can legally broadcast up to 1500 watts of power — what do you think a bad guy will do?” Bailey said.

Even if a rogue AP setup broadcasting illegally outside a building were to be detected — which generally is difficult to do — the perpetrator likely would be long gone before the FCC could show up with direction-finding equipment, Bailey said.

Remarkably, a licensed amateur radio operator can legally interfere with 2.4 GHz equipment, as long as he or she complies with Part 97 of the Federal Communication Commission’s rules. Wireless hot spots operate equipment under Part 15 and therefore must accept interference from any licensed or unlicensed source. Consequently, should a disgruntled ham operator become annoyed with a local Wi-Fi cybercafe — or any 2.4 GHz operator for that matter — he or she could conduct a denial-of-service attack without fear of FCC repercussion.

“We need something like ZoneAlarm for Wi-Fi,” said Bailey, who criticized vendors for failing to supply basic advisory tools. Taking matters into their own hands, Potter and other Shmoo Group members have put together HotSpotDK, a background application that monitors and logs changes to an established Wi-Fi connection.

The application checks for and notes changes in the service set identifier (SSID) and MAC address of the associated AP, the default route or router MAC, and signal strength. Written for the Apple Macintosh OS X operating system, future versions will incorporate an authorized list of MAC addresses and a sensitivity slider for signal power changes, and will enable the monitoring of link status changes.

Potter believes the real fix for Wi-Fi security is 802.1x, a link layer authentication standard. Extended from the original point-to-point protocol (PPP) dial-up authentication specification, an extended authentication protocol (EAP) was designed to work with wired or wireless networks using a centralized server to provide authentication.

Multiple types of authentication can be supported within the 802.1x framework, ranging from token cards to public key authentication. The 802.1x standard is natively implemented in Windows XP and hardware vendors such as U.S. Robotics are lining up behind it.

Bailey is more skeptical. “The devil is really in the implementation details,” he said, pointing out that weaknesses in vendor implementations will be ferreted out by someone. “You should turn on whatever security features you have available,” Potter said, “Any hacker simply looking for low-hanging fruit to exploit will move on to the next site.”

Both consultants also were quick to point out that regardless of the amount of Wi-Fi security infrastructure, the end-user often is the weakest link, because they can be fooled or coerced into giving up user IDs, passwords and WEP keys. “You name it,” Potter said.

Consequently, organizations need to create and, more importantly, enforce security policies. Organizations particularly vulnerable to attack, or those that would find a lengthy network outage severely damaging — such as a public-safety organization — may need additional security layers, including intelligent smart cards or other devices that provide hardware authentication.

Start-up Koolspan demonstrated a hardware-authentication system at the Enterprise & Public Wireless LAN conference in October 2003. Each end-user receives a token, a USB-based device and some on-board software. To initiate a secure session, the token is inserted into the USB port, which causes the device to execute a smart card-based query of the server. The server also issues a challenge to the token. If both queries are authenticated, an AES-encrypted session begins.

The hardware is expected to cost $1595 when the device starts shipping. Koolspan, based in Bethesda, Md., expected to roll out its first product by the end of 2003.

In contrast to The Shmoo Group’s stark picture, U.S. Robotics is offering a more optimistic view of Wi-Fi security. The company recently conducted a series of evangelistic events around the globe to educate resellers on Wi-Fi technology and security solutions in conjunction with 802.11g, especially into the corporate space. “Resellers are saying that wireless is not secure and that it doesn’t perform well, and that is just not true anymore,” said Peter Blampied, a U.S. Robotics official based in Europe.

U.S. Robotics addresses the issue of security in its “802.11g Wireless Turbo White Paper,” discussing security technologies incorporated into its latest hardware and how they should be used.

Features include 256-bit WEP encryption, disable broadcast SSID, MAC address authentication, 802.1x authentication, and Wi-Fi protected access (WPA). Upon successful authentication, the temporal key integrity protocol (TKIP) alters the static 40-bit WEP security key into multiple dynamic 128-bit security keys, making WEP a much more secure protocol.

on the web:

For more information on the technology and business developments that are shaping the land mobile radio and private wireless markets, check out our Web site:
WWW.IWCE-MRT.COM.COM

Tags: Local Area content Wireless Networks

Most Recent


  • AT&T boasts of core 'white box' success in 5G, fiber push
    AT&T said it has now migrated more than 52% of all of its production traffic onto next-generation “white box” core routers running on products from the likes of Broadcom and DriveNets. The company said its move to such “open” systems has helped its aggressive 5G and fiber expansions. “We announced the next-gen open disaggregated core routing […]
  • AT&T wireless growth keyed by FirstNet—now provides 24,000 agencies with 4.4 million connections
    AT&T this week reported that FirstNet ended 2022 supporting more than 24,000 public-safety agencies with “about” 4.4 million connections, including 377,000 connections that were added during the last three months of 2022—a total that represents more than half of the carrier’s post-paid wireless growth for the quarter. AT&T officials released these figures in conjunction with […]
  • AT&T FirstNet unleashes robotic dogs for emergency services
    AT&T is releasing robotic hounds from Ghost Robotics as part of the service provider’s FirstNet emergency responder service. In a blog, AT&T VP Lance Spencer explained that the robotic dogs will be connected to AT&T’s network and deployed for public safety, defense, federal and state agencies, local police and fire departments, and commercial customers. “Network-connected robotic dogs can deliver a […]
  • How 5G is making cities safer, smarter, and more efficient
    It’s a scenario we’ve all experienced: an ambulance with a blaring siren racing against time to get a person in medical distress to a hospital through traffic. What we don’t see is 5G connectivity enabling paramedics to communicate with hospital staff via video conference and coordinate care in real-time before arriving at the emergency room. […]

Leave a comment Cancel reply

To leave a comment login with your Urgent Comms account:

Log in with your Urgent Comms account

Or alternatively provide your name, email address below:

Your email address will not be published. Required fields are marked *

Related Content

  • The battle over connected cars drags on
  • UK officials revamp ESN plans again, target Airwave-to-LTE transition for end of 2026
  • PSCR: Dereck Orr highlights features of June 21-24 virtual event
  • FirstNet buildout on pace for March 2023 completion, AT&T official says

Commentary


How 5G is making cities safer, smarter, and more efficient

26th January 2023

3GPP moves Release 18 freeze date to March 2024

18th January 2023

Do smart cities make safer cities?

  • 1
6th January 2023
view all

Events


UC Ezines


IWCE 2019 Wrap Up

13th May 2019
view all

Twitter


UrgentComm

Cybercrime ecosystem spawns lucrative underground Gig Economy dlvr.it/ShkKbf

31st January 2023
UrgentComm

FAA approves beyond-visual-line-of-sight (BVLOS) flights in North Dakota dlvr.it/ShgxHW

30th January 2023
UrgentComm

AT&T boasts of core ‘white box’ success in 5G, fiber push dlvr.it/Shgb4w

30th January 2023
UrgentComm

Spending American Rescue Plan Act funds: A primer for municipalities dlvr.it/ShgZ52

30th January 2023
UrgentComm

AT&T wireless growth keyed by FirstNet—now provides 24,000 agencies with 4.4 million connections dlvr.it/ShY5qH

27th January 2023
UrgentComm

Report: Remote work causing offices to empty, but walkable cities still in high demand dlvr.it/ShXM7Z

27th January 2023
UrgentComm

AT&T FirstNet unleashes robotic dogs for emergency services dlvr.it/ShW7p8

27th January 2023
UrgentComm

Federal agencies infested by cyberattackers via legit remote-management systems dlvr.it/ShVhn3

26th January 2023

Newsletter

Sign up for UrgentComm’s newsletters to receive regular news and information updates about Communications and Technology.

Expert Commentary

Learn from experts about the latest technology in automation, machine-learning, big data and cybersecurity.

Business Media

Find the latest videos and media from the market leaders.

Media Kit and Advertising

Want to reach our digital and print audiences? Learn more here.

DISCOVER MORE FROM INFORMA TECH

  • American City & County
  • IWCE
  • Light Reading
  • IOT World Today
  • Mission Critical Technologies
  • TU-Auto

WORKING WITH US

  • About Us
  • Contact Us
  • Events
  • Careers

FOLLOW Urgent Comms ON SOCIAL

  • Privacy
  • CCPA: “Do Not Sell My Data”
  • Cookie Policy
  • Terms
Copyright © 2023 Informa PLC. Informa PLC is registered in England and Wales with company number 8860726 whose registered and Head office is 5 Howick Place, London, SW1P 1WG.