Hardening as a best practice for WLAN Security Meanwhile WPA3 is released

A Review and Comparative Analysis of Vulnerability Scanning Tools for Wireless LANs

“…However, due to vulnerabilities in its design including short IV length and FMS attack, WEP key was broken after sniffing and analysing wireless packets. It was even reported that using tools such as Aircrack-ng, the 104-bit WEP key could be broken within seconds [5]. As such, due to underlying design limitations, WEP was replaced by Wi-Fi Protected Access (WPA) in 2003, which implemented the Temporal Key Integrity Protocol (TKIP) along with RC4.…”

“…The study concluded that VAPT is an effective strategy for cyber defence technology and highlighted the need to increase the use of VAPT for complete system security. Another paper investigated cyber security vulnerabilities and mitigations while focusing on industrial radio technologies, including IEEE 802.15.4, IEEE 802.11.1, WirelessHART, Bluetooth, and ZigBee [5]. The study examined how industrial radio technology vulnerabilities may be utilized as vectors for cyberattacks on control systems in complex infrastructures.…”

“…The Nessus Vulnerability Scanner, as illustrated in Fig. 2, includes one of the most comprehensive knowledge bases of security vulnerabilities, as well as hundreds of plugins that may be triggered for deep and/or customized scans [5]. This scanner may discover security flaws in the targeted host's operating system, installed patches, and installed services, as well as recommend remedies to mitigate these security vulnerabilities.…”

“…This scanner may discover security flaws in the targeted host's operating system, installed patches, and installed services, as well as recommend remedies to mitigate these security vulnerabilities. This scanner may also scan the targeted host since it has been granted local access to that host [5]. Also, the scanner can discover vulnerabilities associated to a Wireless Access Point (WAP) such as detecting the underlying OS utilizing Nessus OS Fingerprinting either via FTP, HTML, HTTP, mDNS, MDRPC, NTP, SMB, SNMP and ICMP banner to identify the remote OS.…”