802.11 Security Issues

The most prevalent security issues having serious implications for crossplatform
wireless computing involve key problems that have universal
significance.
There is no per-packet authentication method per se that allows you
to determine the source of a specific packet coming into your system.
This leaves 802.11 vulnerable to “disassociation attacks” that force users
to disconnect from the WLAN at any given time.
802.11 has neither a specified method of user identification nor of
authentication. Without any central method of authentication, authorization,
or accounting support, 802.11 is vulnerable to so many attacks
that it leaves the system completely vulnerable.
Even when the RC4 encryption cipher is used, it is highly vulnerable
to known attacks because there is no security or verification mechanism
in play for 802.11 users. Making this problem worse is that someWLANs set their WEP keys from existing passwords; this makes the
passwords vulnerable if the keys are also determined.
Even with extended authentication, there isn’t any support offered.
Other security mechanisms vulnerable include:


Smart cards

Certificates

Token cards

Passwords (one-time expiry)

Biometrics

Rekeying global keys

No dynamic per-station or session key management

The market hype for most 802.11 products is that they offer security
that is essentially “equivalent” to that of wired Ethernetworks. The
truth is that wireless networks are vulnerable to attack. If you are
unaware of all the problems that exist for a typical WLAN, it makes you
that much more vulnerable to compromising your internal network
infrastructure for anyone with enough time and tools at their disposal.

By taking the proper precautions, you can effectively learn how to
protect yourself, based on these types of vulnerabilities. Understanding
how to establish password policies, add the highest level of encryption
possible, and screen out MAC addresses from wireless NIC cards that
don’t belong on your network are just some of the ways you can protect
yourself.
Even if you are only able to slow down a hacker from accessing your
network, that might give your administrator enough time to see if security
is being violated on any of your computing platforms, identify the
problems, and correct them before your WLAN has difficulties.