Cybersecurity analyst||Network technician||Blockchain enthusiast||Certified Programmer by FMYSD💻, Mentor for Computer services and information Technology📱
![WI-FI PROTECTED ACCESS [WPA]WPA ko muce wireless local network saboda munfi saninsa da hakan. WPA wani na'in tsarone [ ...](https://img3.medioq.com/793/075/1075398037930756.jpg)
16/09/2024
WI-FI PROTECTED ACCESS [WPA]
WPA ko muce wireless local network saboda munfi saninsa da hakan. WPA wani na'in tsarone [ security standard] ga wireless networks da yake amfani da dabarun tsare bayaanai na zamani [ advanced encryption techniques] domin kare shige da fice na bayanai wato Data transmission dakuma masu kutse ma wireless networks.
WPA an gabatar dashine domin ya maye gurbin WEP [Wired Equivalent Privacy] protocol wanda kasance mai rauni wajen tsaro.
WPA yana aikine akan layer 2 [data link] na OSI MODEL sannan babban aikin sane shine samar da tsaro a yayin communicating akan wireless local network.
Sannan WPA nada version irin WPA2 dakuma WPA3.
A duk lakacin da mukayi kokarin joinin WIFI network, computer ko smart phone namu suna samar da ko kirkirar connection to the network's AP [ Access Point]. shikuma AP zaici gaba da watsa bayanin [broadcasting packets beacon] wannan device din fa nason connecting da wannan WIFI network din tare da fadin sunan network din da ake kira da SSID [Service Set Identifier] .
Idan yakasance wannan WIFI network din akwai password to za a bukaci kasaka wannan password din domin joining, idan kuma network din dama babu passwork toh automatically computer naka zai joining saidai dukkan wasu bayanai zasu gudanane batare da wani tsaro ba [encryption]. wanda hakan ke nuna cewa duk wani wanda yake kan wannan network din zai iya ganin traffic naka idan kuma madatsine zai iya injecting packets kamar dai yadda ake kutse na ARP spoofing.
WPA2-PSK AND WPA-ENTERPRISE
A karkashin WPA akwai abunda ake cewa WPA2-PSK [WIFI Protected Access: Pre-Shared Key] wanda protocol ne dake samar da tsaro yayin communications akan WIFI network ta hanyar garkame sakonni da makullan sirri [encryption].
A tsarin WPA2-PSK, network yanada password guda dayane ga kowanne users wato masu amfani da network din [ shine dai wannan password din da kuke tambaya abaku domin samun damar amfani da WIFI network.
AP waton access point yana samar da PSK [ Pre-Shared Key ] ta hanyar wani function da ake kira da 'password-based key derivation function [PBKDF2-SHA1] akan SSID dakuma password.
Shikuma WPA-Enterprise shima version ne na WPA wanda yake amfani da tsarin enterprise-grade authentication mechanism,wani advanced security protocols ne da mafi akasarin manyan organizations suke amfani dashi domin samar da tsaro mai karfi wajen access control wa users dakuma devices misali irin
- RADIUS [Remote Authentication Dial-In User Service]
- TACACS [Terminal Access Controller Access Control System Plus]
- LDAP [Lightweight Directory Access Protocol]
- Kerberos
- 802.1X
WPA ATTACKS
Duk da kasancewar WPA protocol ne mai tsaro sosai amma baisa ya tserewa kutse ba daga madatsa. Ga wasu misalai guda biyu 2 na attacks kamar haka:
- EVIL TWIN ATTACK: wannan wani tsarin kutse ne wanda madatsin zai kirkiri WI-FI access na bogi da suna iri daya dana ainahin wanda hakan zai bashi damar interceptings wato kamar tsayar da ko riqe traffic din daga ainahin user din.
- REAVER ATTACK: wannan wani tool ne da yake bayyanar da raunin WPS [ Wi-Fi Protected Setup] feature to bruteforce the WPA PSK. WPS wani feature ne da aka designing domin ya sauqaqa process na connecting devices to a Wi-Fi network, saidai kuma ya bayyana is vulnerable to brute-force attacks.
akwai sauran attacks irinsu Deauthentication attack, Honeypot attack, KRACK attack.
WPA DEFENSES
Akwai defenses mechanism da ake amfani dasu wajen hana madatsa yin kutse wa WPA, misali:
- Use of wireless intrusion detection system [ WIDS]: ana amfani da WIDS wajen kula wato monitoring na Wi-Fi daga duk suspicious activity wanda zai na alerting din network administrator game da duk wani potential threats.
- Use of 802.11w: shi 802.11w standard sannan ana kuma ce masa Management Frame Protection, yana taimakawa wajen kariya daga wani kalan kutse ma Wi-Fi musamman ma kutse na denial-of-service attacks
- Use of MAC address filtering: amfani da tsarin MAC address filtering yana taimakawa wajen iyakance only authorized devices ne kadai zasu connecting da Wi-Fi network, sannan yana taimakawa wajen kariya da hana duk wani user da bashida izinin hawa kan wannan network din.
- Monitor network traffic: kula da shige da ficen network traffic yana taimakawa wajen gano duk motsi abin zargi dakuma masu kokarin kutse.
- Use of firewall: amfani da firewall wato katangar tsaro yana taimakawa wajen blocking duk wani network traffic din da ba a so sannan kuma yana hana madatsa masu kutse isa ga wannan Wi-Fi network din.
akwai sauran hanyoyi sosai da ake bi wajen wajen kare WPA daga madatsa masu kutse.
wannan kawai dan taqaitaccen bayanine akan WPA dakuma me ya kunsa. amma akwai abubuwa dayawa masu muhimmanci suma sosai wanda ban kawo su ba.
©️ IBRAHIM ALIYU S KAMINA
16/09/2024
