Wireless Security

Wireless Security > Exam relevance: Wireless security appears in the Security Fundamentals domain (15%) and is tested as multiple-choice questions focused on protocol recognition, authentication methods, and attack countermeasures — particularly WPA3 and its advantages over older standards. --- ## Why Wireless Security Is Different Wired networks require physical access to a switch port to eavesdrop. Wireless networks broadcast frames through the air, making them inherently more exposed. Anyone within radio range can attempt to capture traffic, inject frames, or impersonate a legitimate access point. Wireless security protocols exist to provide confidentiality (encrypting data), integrity (detecting tampering), and authentication (proving identity before granting access) — the same CIA triad that governs all of network security. --- ## Wireless Security Protocol Evolution Understanding the progression from weak to strong is essential for the exam. Each generation fixed specific weaknesses in its predecessor. | Protocol | Standard | Encryption | Key Weakness | |---|---|---|---| | WEP (Wired Equivalent Privacy) | 802.11 original | RC4 (40/104-bit) | Static keys, easily cracked in minutes | | WPA (Wi-Fi Protected Access) | Interim fix | TKIP (RC4-based) | TKIP still RC4; vulnerable to attacks | | WPA2 | 802.11i | AES-CCMP | Vulnerable to KRACK attack; weak PSK brute-forceable | | WPA3 | Current | AES-GCMP-256 (WPA3-Enterprise) | Strongest available; mandatory for modern deployments | ### WEP — The Broken Standard WEP was the original 802.11 security mechanism. It used RC4 stream cipher with static keys shared among all clients. The initialization vectors (IVs) were short and reused predictably, allowing attackers to crack WEP keys passively by capturing enough traffic. WEP should never be used — it is considered completely broken. ### WPA —…