Wireless Network Security Administrator

Description:

In this 3-days workshop you will learn how to attack and defend your wireless network from intruders. The hands-on labs are customized and have detailed step-by-step procedures so that every participant can finalize the labs. You will learn how to secure your wireless network against threats and attacks and how to implement enterprise based authentication using certificates. You will learn how to implement enterprise based authentication using Windows Server 2008 R2 Certificate Services.

Audience:

This workshop is designed for everybody, but any experience with wireless technologies is helpful.

Prerequisites:

• Experience with Windows XP or Windows 7
• Knowledge of TCP/IP and networking

Duration:

3 days

Objectives:

• Wireless LAN medium
  • CSMA/CA
  • Control Frames
  • Data frames
  • Management frames
  • Beacon frames
  • Shared key authentication
  • Association and disassociation
  • Authentication and de-authentication
  • Roaming
• Wireless LAN topologies
  • Wireless adapters
  • Type of access points
  • Infrastructure
  • Ad-hoc
  • Service Set Identifier
  • Basic Service Set Identifier
  • Extended Service Set
• Wireless LAN security
  • 802.11 security
  • MAC filtering
  • Encryption
  • Wired Equivalent Privacy (WEP)
  • Wi-Fi Protected Access (WPA-PSK)
  • Use of RADIUS authentication in WLAN (Microsoft NPS)
  • 802.1x authentication types (EAP-TLS, EAP-PEAP)
• Overview of Wi-fi tools (LAB)
  • Overview over hardware adaptors
  • Wardriving tools
  • Cain and Abel
  • Wireshark
  • Netstumbler, Kismet
  • Aircrack-ng suite (aircrack-ng, airmon-ng, airolib-ng, airtun-ng,…)
  • Backtrack 4
• Attacking the wireless network (LAB)
  • Setting up a rogue access point
  • Disassociation and de-authentication attacks
  • Bypass MAC filter attack
  • Wireless access point attack
  • Wireless client attack
  • ARP injection attack
  • Breaking encryption
  • Eavesdropping
  • Tunnelling wireless traffic
  • Rainbow tables
•  Implementing a Public Key Infrastructure
  • What is a certificate
  • What is a certificate template
  • Overview of PEAP-EAP-MSCHAPv2 authentication
  • Overview of PEAP-EAP-TLS authentication
  • Installing and configuring Windows Server Certificate Services
• Securing wireless networks with 802.1x (LAB)
  • Configuring Network Policy Server on Windows Server 2008 R2
  • Configure wireless access point for RADIUS authentication
  • Deploying certificates
  • Configuring EAP-TLS authentication
• Implementing dynamic vlans on wireless networks (LAB)
  • What are vlans
  • Routing between vlans
  • Configure Network Policy Server for dynamic vlan assignment
  • Configure DHCP
  • Configure Cisco switch for 802.1x authentication
  • Configure wireless access point