Chapter 11: Hacking Wireless Networks
31. In 802.1X, what is an authentication server?
This server, which might be a Remote Access Dial-In User Service (RADIUS) server, is used as a centralized
component that authenticates the user and performs accounting functions. For example, an ISP using RADIUS
can verify who logged on to the ISP service and how long the user was connected. Most RADIUS servers are
*nix based, but the Microsoft implementation of RADIUS is called Internet Authentication Service (IAS) in
Windows Server 2000 and Windows Server 2003. It is called Network Policy Server after Windows Server
2008.
32. What is WEP, and is it an acceptable way to secure wireless networks?
Wired Equivalent Privacy (WEP), part of the 802.11b standard, was developed to encrypt data traversing a
wireless network. For some time, it gave many security professionals a false sense of security that wireless
technology could be just as safe as wired networks. Unfortunately, WEP has been torn to shreds by security
professionals, professors from major universities, and hackers who post ways to crack WEP encryption. Some
argue that WEP is still better than no security at all, and when it’s combined with the security of a virtual
private network (VPN), they claim that WEP works well for home users or small businesses. Still, many saw a
need for a better way to protect WLANs.
33. What are the basic components of a wireless network?
The basic components of a wireless network are:
– Wireless network interface card (WNIC)
– Access point (AP)
– Wireless networking protocols
– A portion of the RF spectrum
34. What is the role of a wireless NIC?
For wireless technology to work, each node or computer must have a WNIC, which converts the radio waves
it receives into digital signals the computer understands. There are many wireless NICs on the market, but be
careful deciding which ones to purchase if you’re considering using specific tools for detecting APs and
decrypting WEP keys, or using antennas that can cover a large distance.
35. What is the function of a “working group” within the IEEE?
Working groups (WGs) of the IEEE are formed to develop new standards. After a WG has reached consensus
on a proposal for a standard, the Sponsor Executive Committee must approve the proposal. Finally, after the
proposal is recommended by the Standards Review Committee and approved by the IEEE Standards Board,
you have a new standard.
36. What is a basic service set (BSS)?
802.11 uses a basic service set (BSS) as its building block. A BSS is the collection of devices (AP and stations
or just stations) that make up a WLAN. A basic service area (BSA) is the coverage area an AP provides.
37. What is frequency-hopping spread spectrum (FHSS)?