Wireless Security

Submitted on
CS 571 Network System Administration
Professor Mitch Cochran
Wireless Security Write-up Assignment 2
California University of Management and Sciences
Spring Quarter 2015

Submitted by
Prasad Gundu G134013
WIFI SECURITY
Many organizations and users have discovered that wireless communications and devices are helpful, adaptable and simple to use. Users of Wireless local network devices have flexibility to movie their smart devices one spot to another inside their workplaces while keeping up network with the system. Wireless personal networks permit users to share the information and applications to system networks and different users with compatible devices, without being fixed to printer cables and other peripheral device connections. Users of handheld gadgets, for example, individual computerized partners (PDAs) and phones can synchronize information in the middle of PDAs and PCs and can utilize system administrations, for example, wireless email, web browsing, and Internet access. Further, wireless network connections can help associations cut their wiring costs.
What is the Risk?
Wireless networks and handheld devices are Vulnerable against a large number of the same risks as conventional wired systems. Intruders who get access to information systems by means of wireless networks can bypass firewall security. When they have access to systems, intruders can launch denial of service attacks, steal personal information, violate the protection of real users, malicious or virus code, and disable operations. Sensitive data that is transmitted between two wireless devices can be captured and disclosed if not secured by strong encryption. Handheld devices, which are effortlessly stolen, can uncover sensitive data.
Before building wireless networks and utilizing handheld devices, companies ought to utilize risk management methodologies to assess the risks included, to make moves to reduce the threats to an adequate level, and to keep up that satisfactory level of risk. Utilizing risk administration process, managers can secure system and data in a practical way by adjusting the operational and financial expenses of required defensive measures with the increases in mission capacity to be accomplished through the utilization of new technology.
Security Standards:
A "security-enabled wireless network" shows that a type of encryption has been utilized to encode information before it is show over the wireless network. Only genuine remote system users (who have a legitimate encryption key) can decode the broadcast information and access the system.
Getting through wireless security is extremely difficult but it’s possible. With the right information and devices, sufficiently given time, a watchful hacker will break in. So utilizing the latest improvements in wireless security is suggested.
However there are a few variables to consider,
Newer security strategies utilize more complex encryption systems which can decrease the rates of information transfers, and in some cases the general running speed of slower/old computers.
Configuring your Wireless Access Point with the most recent forms of security can imply that more established wireless devices don't have the ability of connecting to the network. Security Type | Authentication | Encryption | Suitable for Corporate WAN | Suitable for Home and Small Business WLAN | WEP | NONE | WEP | POOR | LES THAN GOOD | WPA (PSK) | PSK | TKIP | POOR | GOOD | WPA2 (PSK) | PSK | AES-CCMP | POOR | BEST | WPA (FULL) | 802.1X | TKIP | BETTER | *GOOD (EXPENSIVE) | WPA2 (FULL) | 802.1X | AES.CCMP | BEST | *GOOD (EXPENSIVE) |

For most small businesses WPA2-PSK (Wi-Fi Protected Access – Pre-shared Security Key) is the ideal form of security. It provides above average security while still making it easy for new users to join the wireless network without technical assistance.
WPA (Full) & WPA2 (Full) make use of a server to authenticate network users and then deliver a one-time, unique, WPA encryption key for each session. In other words, you don't need a common companywide WPA encryption key for the entire network - which might leak out to unwanted users. (For example an ex-employee who knows your WPA2-PSK passphrase).
Recommendations:
The trends in use of information technology point to increased implementation of wireless communications networks and use of wireless devices. Each new development will present new security risks, which must be addressed to ensure that critical assets remain protected. Actions that organizations should take to protect the confidentiality, integrity, and availability of all systems and information include:
Accessing the risks, test and assess system security controls for wireless networks more as often as possible as for different systems and networks. Keeping up secure remote systems is an ongoing process that requires more effort than that needed for different systems and networks.
Perform a risk evaluation, build up a security approach, and focus security requirements before buying wireless technologies.
Keep up a familiarity with the specialized and security implication of wireless and handheld device technologies.
Carefully anticipate the establishment of wireless technologies.
Apply security management practices and controls to keep up and work secure wireless networks.
Physical controls ought to be executed to ensure wireless systems and information.
Enable, utilization, and routinely test the natural security features, for example, verification and encryption systems that are accessible in wireless technologies.
Firewalls and other proper security mechanisms ought to likewise be utilized.
References:
Shirley Radack. SECURITY FOR WIRELESS NETWORKS AND DEVICES.
Retrieved on April 24th, 2015, from http://www.itl.nist.gov/lab/bulletns/bltnmar03.htm.
Keys Capt. (December 12th, 2005). Why do I need security in my Wi-Fi Networks?
Retrieved on April 24th, 2014, from http://www.dslreports.com/faq/11275.
Rampant Technology. (2015). Wireless Security - Do I Need It?
Retrieved on April 29th, 2015, from http://www.rampant.com.au/index.php/latest-news/56-wireless-security-do-i-need-it