Advances In Wireless Security
All is not bleak, however. With the advent of many wireless attack methods, means to counter the attacks and reduce exposure are also available. The evolution of wireless security continues in a cycle IT professionals will recognize from wired network security-a game of cat and mouse. As new weaknesses are found in wireless networks and protocols, new methods and designs are put into place to address them.
One of the first efforts at securing 802.11 networks was WEP. The use of RC4 with 40-bit keys was considered sufficient. However, a flaw in the specification regarding the data fed into the RC4 algorithm was found that allowed attackers to derive the secret key used to protect traffic. In order to address that issue, WPA was created.
As of this writing, WPA2 is now available for 802.11X networks. Lessons learned from attacks against WEP and WPA, both practical and theoretical, have been applied in the design of WPA2. Other security mechanisms are being developed or have been deployed for various wireless protocols.
Increases in Wireless Security Mechanisms
Frequency hopping, a technique once used primarily by the military, is now used in many wireless networking protocols to make intercepting transmissions difficult. Specially designed antennas are used to reduce the area where radio transmissions can be received. Cryptographically strong hashing and encryption algorithms are being analyzed and implemented at multiple layers of the networking stack. These measures provide a defense in depth-the compromise of a single security mechanism still leaves in place other protection mechanisms to offset the risk. This strategy prevents new exploits and attacks from gaining complete access to sensitive networks. The extra redundancy and layers can provide sufficient time for IT administrators to test and deploy emergency security fixes when a vulnerability is discovered in the network.


