Friday, March 2, 2018

Chapter 3 - Security Communications Brief


WPA and WPA2

It's important to remember that these are certifications by the WiFi Alliance and not from the 802.11 standard. This means that they validate that a device uses portions of the security that 802.11 provides. They both come in two forms, Personal and Enterprise. Personal is known as Pre Shared Key because it uses a PSK.

WPA has been depreciated and as such its use should be as well. It used TKIP/RC4 and again, as such, TKIP/RC4 should no longer be used either.

The Enterprise version of both WPA and WPA2 both use the 802.1x framework for authentication and key management. This framework has three primary components.
1.) Supplicant (Client STA)
2.) Authenticator (AP or Controller)
3.) Authentication Server (This is normally your RADIUS server)

The EAPoL protocol is used for communication between the Supplicant and Authenticator, and RADIUS is used between the Authenticator and the Authentication Server.

The process looks something like this

  • Client Authenticates and Associates to an AP
  • Open System Authentication takes place
  • EAP Authentication using the RADIUS server
  • 4-way handshake generates encryption keys for STA and AP
  • Encrypted communications commence.
     
Carpenter, Tom. CWAP: Certified Wireless Analysis Professional: Official study guide: Edition CWAP-402. Certitrek Publishing, 2016.


RADIUS

RADIUS - Remote Authentication Dial-In User Service

RADIUS Process
  1. Access Request - Username/Password or Certificate
  2. Access Challenge
  3. Access Accept/Reject

6 comments:

  1. Going to graduate school was a positive decision for me. I enjoyed the coursework, the presentations, the fellow students, and the professors. And since my company reimbursed 100% of the tuition, the only cost that I had to pay on my own was for books and supplies. Otherwise, I received a free master’s degree. All that I had to invest was my time.
    ExcelR business analytics certifications

    ReplyDelete
    Replies
    1. This article discussing security communications provides useful insights into secure data transmission, wireless communication safety, and protection mechanisms in modern networking environments. Understanding communication security is very important for preventing unauthorized access, protecting sensitive information, and ensuring reliable data exchange across systems. Students interested in cybersecurity and secure networking concepts can also explore Network Security Projects for Final Year to understand how secure communication systems are implemented in real-world applications.

      Delete
  2. Excellent Blog! I would like to thank for the efforts you have made in writing this post. I am hoping the same best work from you in the future as well. I wanted to thank you for this websites! Thanks for sharing. Great websites!
    data analytics courses

    ReplyDelete
    Replies
    1. Modern communication infrastructures increasingly depend on encryption, authentication, and intelligent monitoring techniques to maintain security and reliability. Learners looking to build advanced protection systems can further refer to Information Security Projects for ideas related to cyber defense, secure data handling, and network protection technologies. This post provides a practical introduction to communication security concepts and their importance in digital systems.

      Delete

  3. I finally found great post here.I will get back here. I just added your blog to my bookmark sites. thanks.Quality posts is the crucial to invite the visitors to visit the web page, that's what this web page is providing.
    best institute for data science in bangalore

    ReplyDelete
  4. So I replied and added the new information to the site. I learned where I was not being clear and rewrote those sections until I no longer received emails asking for clarification.
    PMP Certification in Bangalore

    ReplyDelete