A Study of Wi-Fi Security in City Environment

Valchanov, Hristo; Edikyan, Jan; Aleksieva, Veneta

doi:10.1088/1757-899x/618/1/012031

Cited by 11 publications

(3 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Only a 0.2% used WPA or the older WEP, while 25.1% had no encryption. Similar studies from 2019 show comparable results in Romania and Bulgaria where WPA2 was distinctly the most popular protocol [ 38 , 39 ]. While these results may be slightly different in other countries, they show that WPA2 is still common and that we can expect millions of devices to communicate over this encryption scheme for several years forward.…”

Section: Background and Related Worksupporting

confidence: 67%

Automatic Verification and Execution of Cyber Attack on IoT Devices

Færøy

Yamin

Shukla

et al. 2023

Sensors

View full text Add to dashboard Cite

Internet of Things (IoT) devices are becoming a part of our daily life; from health monitors to critical infrastructure, they are used everywhere. This makes them ideal targets for malicious actors to exploit for nefarious purposes. Recent attacks like the Mirai botnet are just examples in which default credentials were used to exploit thousands of devices. This raises major concerns about IoT device security. In this work, we aimed to investigate security of IoT devices through performing automatic penetration test on IoT devices. A penetration test is a way of detecting security problems, but manually testing billions of IoT devices is infeasible. This work has therefore examined autonomous penetration testing on IoT devices. In recent studies, automated attack execution models were developed for modeling automated attacks in cyber ranges. We have (1) investigated how such models can be applied for performing autonomous IoT penetration testing. Furthermore, we have (2) investigated if some well known and severe Wi-Fi related vulnerabilities still exist in IoT devices. Through a case study, we have shown that the such models can be used to model and design autonomous penetration testing agents for IoT devices. In addition, we have demonstrated that well-known vulnerabilities are present in deployed and currently sold products used in IoT devices, and that they can be both autonomously revealed through our developed system.

show abstract

Section: Background and Related Worksupporting

confidence: 67%

Automatic Verification and Execution of Cyber Attack on IoT Devices

Færøy

Yamin

Shukla

et al. 2023

Sensors

View full text Add to dashboard Cite

show abstract

“…e statistics reveal the security posture of these types of networks [8]. Wardriving is often a passive experiment that targets publicly available information from each wireless access point [9]. It typically requires a laptop or an Android device (smart phone or Tablet).…”

Section: Wardrivingmentioning

confidence: 99%

“…Where there is a need for older devices, separate and limited networks can be used to support WPA/WPA2 mixed mode, and WPS settings should be disabled from all access points. For future work, they suggested more research on 802.11ac and 802.11ah networks in the greater Varna area [9].…”

Section: Related Workmentioning

confidence: 99%

Assessment and Test-case Study of Wi-Fi Security through the Wardriving Technique

Etta

Imoize

Shukla

et al. 2022

Mobile Information Systems

View full text Add to dashboard Cite

This study aims to investigate Wireless Local Area Network (WLAN) within the context of its applicability as a 21st-century business tool and its survivability in a security threat-infested cyber landscape. WLAN security leverages the Wardriving technique deployed within geolocation to scan for WLAN density and explore the associated security mechanisms. Specifically, the study adopts two approaches; the first part reviews relevant research articles in electronic libraries and databases on WLAN security based on wardriving techniques. The other part comprises a measurement campaign conducted in a mid-sized city in North Cyprus. The field measurement aims to underscore the claims from the literature to find out how the security encryption technologies are used. In particular, the goal is to determine the availability of WLAN infrastructure and monitor how the security measures are implemented in Northern Cyprus. The main objective is to determine the security state of WLAN in Cyprus and examine how it can be generalized for related environments. In order to completely grasp the research issue posed in this study, data analyses from several perspectives are analyzed and examined critically. The wardriving approach has been used in this work to crawl wider regions for examination. This study was conducted with security findings drawn only from publicly accessible information emitted by each investigated wireless access point. The channel usage, Service Set IDentifier (SSID) security, the Encryption type (Open, WEP, WPA, WPA2, WPA3, and Mixed mode), WPS usage statistics, geographical locations, detailed security statistics described in Wigle CSV format, and vendor statistics are highlighted. Generally, results indicate that 21,345 WLANs were detected. From the detected WLANs, 23 (0.1 percent) used WEP encryption, 18 (0.08 percent) used WPA-TKIP encryption, 5,359 (25.1 percent) were unencrypted, and a clear majority of 9,139 (42.82 percent) used the more secure WPA2 encryption, while 13 networks (0.06 percent) used the latest WPA3 encryption technique. The results imply that WLAN security in Cyprus can be said to be moderate. Thus, this study adds to the expanding corpus of research on WLAN security and Wardriving to all parties in the wireless security ecosystem. The current study examines WLAN operations in North Cyprus while pointing to future research directions on Wireless LAN security mechanisms. Overall, the dataset from the wardriving experiment is novel and would serve future research exploration in the wireless security systems domain.

show abstract