Wireless Network Security
Concept
Wireless Network Security refers to the protection of wireless networks
(Wi-Fi) from unauthorized access, misuse, data theft, and disruption. Since
wireless communication uses radio waves, signals can be intercepted by
attackers within range, making security controls essential.
Wireless security focuses on:
Authentication (who can connect)
Encryption (protecting data)
Access control (what users can do)
Monitoring and intrusion prevention
Why Wireless Networks Are Vulnerable
Open transmission medium (radio signals)
Weak or misconfigured security settings
Default credentials on access points
User behavior (connecting to unknown networks)
Wireless Network Attacks
Concept
Wireless network attacks target Wi-Fi communication, access points, or
connected devices to gain unauthorized access, intercept data, or disrupt
services.
Attackers do not need physical access; they only need to be within signal
range.
Types of Wireless Network Attacks
1. Unauthorized Access (Rogue Access)
Description
An attacker connects to a wireless network without permission due to:
Open Wi-Fi
Weak passwords
Poor authentication
Cyber Impact
Data theft
Network misuse
Malware injection
Example
A student connects to an unsecured university Wi-Fi network and accesses
internal resources.
2. Eavesdropping / Packet Sniffing
Description
Attackers capture wireless traffic to read sensitive information.
Cyber Impact
Credential theft
Session hijacking
Privacy violation
Example
An attacker captures login data from users connected to public Wi-Fi using
unencrypted protocols.
3. Man-in-the-Middle (MITM) Attack
Description
Attacker positions themselves between the user and the access point.
Cyber Impact
Data modification
Credential interception
Session hijacking
Example
Attacker sets up a fake Wi-Fi hotspot named “Free WiFi” and intercepts user
traffic.
4. Wi-Fi Password Cracking
Description
Attackers capture Wi-Fi handshake packets and attempt to crack encryption
keys.
Cyber Impact
Network compromise
Unauthorized access
Example
Weak WPA2 passwords cracked using dictionary attacks.
Rogue Access (Rogue Access Points)
Concept
A Rogue Access Point (Rogue AP) is an unauthorized wireless access point
connected to a trusted network without the knowledge or approval of
network administrators. It creates a hidden entry point that bypasses
existing security controls such as firewalls and IDS.
Rogue APs can be malicious or accidental.
Types of Rogue Access Points
1. Malicious Rogue AP
Installed intentionally by attackers
Used to intercept traffic or gain internal access
2. Accidental (Unintentional) Rogue AP
Installed by employees or students for convenience
Example: personal Wi-Fi router connected to office LAN
How Rogue Access Attacks Work (Conceptual Flow)
Internal Network → Rogue AP → Attacker / Unauthorized Users
Rogue AP broadcasts Wi-Fi signal
Users unknowingly connect
Security monitoring is bypassed
Cyber Attacks Enabled by Rogue APs
Man-in-the-Middle attacks
Credential harvesting
Malware injection
Unauthorized internal network access
Data exfiltration
Example
An employee connects a personal Wi-Fi router to the company LAN.
An attacker outside the building connects to this rogue Wi-Fi and
accesses internal systems.
Why Rogue APs Are Dangerous
Bypass perimeter security
Difficult to detect without monitoring tools
Create insider-like access for attackers
Prevention and Detection
Wireless Intrusion Detection Systems (WIDS)
Network Access Control (NAC)
Disable unused Ethernet ports
Employee awareness
Regular wireless audits
2. WEP Attacks
Concept
WEP (Wired Equivalent Privacy) is an outdated Wi-Fi security protocol
designed to provide confidentiality similar to wired networks. It is
cryptographically broken and should never be used.
Why WEP Is Insecure
Uses weak RC4 encryption
Short initialization vectors (IVs)
IV reuse leads to key recovery
Common WEP Attacks
1. IV Collision Attack
Attacker captures large number of packets
Repeated IVs reveal encryption key
2. Packet Injection Attack
Attacker injects traffic to speed up key recovery
Example
An attacker captures Wi-Fi traffic from a WEP-secured network and recovers
the encryption key within minutes.
Impact
Full network compromise
Unauthorized access
Data theft
3. WPA Attacks
Concept
WPA (Wi-Fi Protected Access) was introduced to replace WEP. WPA uses
stronger encryption but still has vulnerabilities, especially in WPA-PSK (Pre-
Shared Key) mode.
Common WPA Attacks
1. Handshake Capture Attack
Attacker captures authentication handshake
Attempts offline password guessing
2. Dictionary / Brute Force Attack
Exploits weak passwords
Example
A WPA2 network with password password123 is compromised after
handshake capture and dictionary attack.
Impact
Unauthorized Wi-Fi access
Traffic decryption
Session hijacking
4. WPA3 Improvements (Brief)
Simultaneous Authentication of Equals (SAE)
Protection against offline brute-force attacks
Forward secrecy
Stronger encryption
Wireless Security Mechanisms (Brief)
WPA3 encryption
Strong passwords
Disable WPS
MAC filtering (limited)
Intrusion detection systems
Secure authentication (802.1X)
Regular monitoring