WPA was ratified by a Wi-Fi Alliance in 2003 as we mentioned this was an interim solution.
The name is a bit misleading.
WPA to suggest that it's improved more secure version of WPA protocol is the basic version of WPA instead.
One that did not catch on users and manufacturers had to be encouraged somehow to move on to the new
standard WPA was replaced with WPA too.
And it was decided that the interm version will be called WPA
because it's essential to ensure maximum retroactive compatibility to use similar security solutions.
That's why we still use the RC for algorithm
to enhance security.
We extend the ivy from 24 to 48.
It's this is a significant change.
We also eliminate the problem related to the lack of dynamic key change re-introduce the ticket protocol
that allows the automatic generation of keys
WPA verifies the identity of users.
Authenticates them not only against the pre-shared key but also using the already mentioned radious
server.
The last problem that was noticed and fixed related to data integrity instead of a CRC checksum the
protocol used a cryptographic hash function this function makes it more difficult to modify packets
without affecting checksums.
The first version of WPA is vulnerable to attacks.
Most common WPA attacks target pre-shared keys since cracking them by going through all combinations
through brute force attack.
Exhaustive research wouldn't be cost effective.
Dictionary files are used for this purpose.
If for some reason you need to use the WPA and the personal mode and the pre-shared key mode is key
has to be long and complicated
don't shrink from providing 2:54 random characters as a key key should not be found on any dictionary
or word list.
This should not be a simple permutation either.
Adding one at the end doesn't do anything to improve the security of a key.
Let's now briefly discuss WPA to this protocol uses radious servers as far as wireless networks are
concerned.
This is a real revolution
RC for algorithm which is vulnerable to incorrect implementation is replaced with the Advanced Encryption
Standard additionally.
Each frame is encrypted 10 times using abs this solution is known as CCMA MP a brute force attack on
the frame or WPA to protected packet would take over two to 100 power operations to succeed.
This is practically impossible.
The protocol makes use of a long random and unpredictable 48 bit initialization vector
management is automatic and that is you don't need a ticket for this.
How can you break into a WPA to network.
It takes the same methods that need to be used for a WPA network there are essentially two classes of
attacks.
The first class utilizes for example the processing capacity of graphics cards that scale very well.
You can run multiple operations at a time.
If a computer has more than one well-equipped graphics card with kuda the processing is complex so it
might take a bit.
You can also try to guess the key.
This works to limit the territory of attack to appear as a protected network.
This will prove effective if the key is easy to determine.
Now a brief comparison of the three technologies WEP WPA and WPA two or the arrow to double standard
WEP like WPA encrypts packets using RC for ARM like WEP WPA dynamically changes keys and as a stronger
IVI WPA to use the CC MP version of Advanced Encryption Standard for encryption the same protocol is
also used for automatically exchange as you'll see.
The solution is a great way of ensuring Flans security
the security of lands which has the security of computer systems is optional.
It's our task to choose appropriate technologies for Stainer networks.
There is of course many more technologies to choose from each technology protects a given layer and
there are less conspicuous or wireless networks.
The situation is much more simple a wireless network administrator responsible for security has to make
two simple decisions.
Select a method for authenticating users.
This should be done through a radius server and choose a method for ensuring the confidentiality and
authenticity of exchange data that WPA to technology should be employed for this selecting these two
options will practically guarantee a very high level of network security.
Thank you.