BSCIT

Network Security
Unit 5
Wireless Network Security

NS-U4-WIRELESS-NW-SEC 1
 Unit 5
Wireless Network Security

NS-U4-WIRELESS-NW-SEC 2
 5 Topics
1. IEEE 802.11 Wireless LAN Overview

2. IEEE 802.11i Wireless LAN Security

3. Wireless Applica=on Protocol Overview

4. Wireless Transport Layer Security

5. WAP End-to-End Security

NS-U4-WIRELESS-NW-SEC 3
 1. IEEE 802.11 Wireless LAN
Overview

NS-U4-WIRELESS-NW-SEC 4
 IEEE 802.11 Wireless LAN Overview (4)
1. The Wi-Fi Alliance

2. IEEE 802 Protocol Architecture

3. IEEE 802.11 Network Components and Architectural Model

4. IEEE 802.11 Service

NS-U4-WIRELESS-NW-SEC 5
 1. The Wi-Fi Alliance
• IEEE - Ins(tute of Electrical and Electronics Engineers
• IEEE 802 - Commi:ee - LAN
• IEEE 802.11 - Commi:ee - WLAN
• Develop a protocols and transmission specifica(ons for WLANs
• WECA - Wireless Ethernet Compa(bility Alliance
• Industry Consor(um

NS-U4-WIRELESS-NW-SEC 6
NS-U4-WIRELESS-NW-SEC 7
 2. IEEE 802 Protocol Architecture

NS-U4-WIRELESS-NW-SEC 8
NS-U4-WIRELESS-NW-SEC 9
 2. IEEE 802 Protocol Architecture
1. Logical Link Control

2. Media Access Control

3. Physical Layer

NS-U4-WIRELESS-NW-SEC 10
 1. Logical Link Control
• Flow Control
• Error Control

NS-U4-WIRELESS-NW-SEC 11
 2. Media Access Control
• Assemble data into frame (MSDU -> MPDU)
• Addressing
• Error detec=on
• Medium access
• Specific IEEE 802.11 func=ons
• Reliable data delivery
• Wireless access control protocols

MPDU - MAC Protocol Data Unit

MSDU - MAC Service Data Unit

NS-U4-WIRELESS-NW-SEC 12
 3.Physical Layer
• General IEEE 802 func1ons
• Encoding/decoding of signals
• Bit transmission/recep1on
• Specifica1on of Transmission medium
• Specific IEEE 802.11 func1ons
• Frequency band defini1on
• Wireless signal encoding
NS-U4-WIRELESS-NW-SEC 13
 MPDU Frame Format
• Header
• MAC Control
• Dest. MAC Address
• Source MAC Address
• Body
• MSCU (Mac Service Data Unit)
• Trailer
• CRC (Cyclic Redundancy Check) /FCS(Frame Check Sequence) Field
NS-U4-WIRELESS-NW-SEC 14
 MPDU Frame Format

NS-U4-WIRELESS-NW-SEC 15
 3. IEEE 802.11 Network
Components and Architectural
Model

NS-U4-WIRELESS-NW-SEC 16
 3. IEEE 802.11 Network Components and
Architectural Model
• BSS - Basic Service Set
• DS - Distribu1on System
• AP - Access Point
• IBSS - Independent BSS
• ESS - Extended Service Set

NS-U4-WIRELESS-NW-SEC 17
NS-U4-WIRELESS-NW-SEC 18
Basic service set (BSS)
The smallest building block of a wireless LAN, which consists of
wireless sta:ons execu:ng the same MAC protocol and compe:ng for
access to the same shared wireless medium.

A BSS may be isolated, or it may connect to a backbone Distribu(on

system (DS) through an access point (AP).The AP func?ons as a bridge
and a relay point.

When all the sta*ons in the BSS are mobile sta*ons that communicate
directly with one another (not using an AP), the BSS is called an
independent BSS (IBSS). An IBSS is typically an ad hoc network.

NS-U4-WIRELESS-NW-SEC 19
 IEEE 802.11 Service

NS-U4-WIRELESS-NW-SEC 20
 IEEE 802.11 Service
• Services that needs to be provided by the wireless LAN to
achieve the func:onality equivalent to that which is inherent to
wired LAN.

NS-U4-WIRELESS-NW-SEC 21
NS-U4-WIRELESS-NW-SEC 22
 Categeoriza*on of Service
• Based on Provider
• DS - Distribu4on System
• SS - Service Sta4on
• Based on the Nature of Service
• LAN Access
• MSDU Delivery

NS-U4-WIRELESS-NW-SEC 23
• Distribu)on of Messages within a DS
• Associa)on related services
• 3 Transi)on types
• No Transi)on
• BSS Transi)on
• ESS Transi)on
• 3 Services
• Associa)on
• Reassocia)on
• Disassocia)on
NS-U4-WIRELESS-NW-SEC 24
NS-U4-WIRELESS-NW-SEC 25
NS-U4-WIRELESS-NW-SEC 26
NS-U4-WIRELESS-NW-SEC 27
NS-U4-WIRELESS-NW-SEC 28
NS-U4-WIRELESS-NW-SEC 29
NS-U4-WIRELESS-NW-SEC 30
NS-U4-WIRELESS-NW-SEC 31
NS-U4-WIRELESS-NW-SEC 32
NS-U4-WIRELESS-NW-SEC 33
NS-U4-WIRELESS-NW-SEC 34
NS-U4-WIRELESS-NW-SEC 35
NS-U4-WIRELESS-NW-SEC 36
WAP
Wireless Applica,on Protocol
NS-U4-WIRELESS-NW-SEC 37
 History
• Introduced in 1999
• Used widely in early 2000s
• By 2010 use of WAP Declined

NS-U4-WIRELESS-NW-SEC 38
 WAP Key points
• WAP used WML (wireless markup language)

NS-U4-WIRELESS-NW-SEC 39
 WAP Protocol Stack
Wireless Applica,on Environment (WAE)
Wireless Session Protocol (WSP)
Wireless Transac,on Protocol (WTP)
Wireless Transport Layer Security (WTLS)
Wireless Datagram Protocol (WDP)

NS-U4-WIRELESS-NW-SEC 40
NS-U4-WIRELESS-NW-SEC 41
NS-U4-WIRELESS-NW-SEC 42
NS-U4-WIRELESS-NW-SEC 43
NS-U4-WIRELESS-NW-SEC 44