Wi-Fi: WPA2 Security Vulnerability and Solutions

Abstract

The Internet of Things (IoT) is an emerging network infrastructure with more than five devices owned by a single user. Wireless connectivity forms the backbone of such infrastructure. IoT uses diverse wireless communication technologies such as IEEE 802.15.4, Wi-Fi, Zigbee, Bluetooth, RFID, BLE (Bluetooth Low Energy), and various other cellular technologies. Wi-Fi is most suitable for IoT Home or office networks. Practically wireless signals do not adhere to the boundaries of the office or home, or organization and impose inherent security risks like information leakage, unauthorized access, other security and privacy threats to networking infrastructure. Therefore Authorization/Association of devices is one of the main security concerns. This paper discusses how unauthorized access to wireless networks (Wi-Fi) can be secured by improving existing WPA2 protocol security.

Cybersecurity Threats for a Web Development

“…Cryptographic failure is a symptom rather than a cause. Cryptographic failures can result from a variety of factors, including weak encryption algorithms, insecure key management, improperly configured encryption, and cryptographic side-channel attacks, [24], [25].…”

(In)Security in Wi-Fi networks: a systematic review

“…IEEE 802.11 defines models, namely pre-Robust and robust security networks, to secure the information Exchange in wireless networks. The Pre-RSN (Robust Security Networks) includes Wired Equivalent Privacy (WEP), and Wi-Fi protected Access (WPA), while as RSN model uses a four-way handshake to provide authentication [4].…”

“…Commercial WPA uses 802.1x +EAP for authentication and replaces WEP with TKIP in this mode; no pre-shared key (PSK) is used but instead RADIUS server is required [4]. Using a PSK of less than 20 characters is very unsafe.…”

“…in key size (initially 40 bits, later extended to 104 bits) and its lack of replay detection. As a result, users had to complement WEP with Virtual Private Networks (VPNs), IEEE 802.1X, or proprietary solutions to meet their security needs [4]. WEP is no longer considered secure and should be replaced by a newer protocol such as WPA2 [5].…”