#6441

CONCEPT: Wireless Networks and Devices

Beginning with extremely minimal knowledge on the workings behind wireless networks and devices, I'd like to conduct an investigation on how they work and analyse their security risks. With the increasing usage of wireless internet and devices, WiFi hotspots have risen significantly. So it seems extremely useful and interesting to research the security vulnerabilities of wireless devices and public Wi-Fi hotspots in particular, and hopefully with the help of Jazz (course tutor), learn how to ethically hack them.

GOALS:

1. Learn how to think like a security engineer:

Gain an understanding of the vulnerabilities of Wi-Fi networks and public unsecured hotspots.

Learn how to recognise when personal data has been breached via the usage of these networks, and;

Know what to do in these situations

2. Achieve an understanding of the vulnerabilities and exploits surrounding wireless networks and devices.

3. Gain a practical experience of real-life network and device hacking.

ACTIONABLES:

1. Research and blog about the following topics on wireless networks and devices

How they work

Security vulnerabilities

Methods used by hackers to hack devices and network users

Software and distributions used to exploit wireless networks and devices e.g. WireShark, Kali Linux.

Methods to manage security threats on oneself/user

2. Conduct bi-weekly research of public Wi-Fi hacking case studies.

3. Practical component: Learn how to hack. If I can find an ethical way, I'd     like to hack someone on a public Wi-Fi network; otherwise, I'll focus on     exploiting devices e.g. a wireless printer.

MARKING CRITERIA

HD:   

Many insightful blog posts about progress and analysis.  

Completion of all actionables and detailed evidence of research/progress on blog.

Detailed report of practical component with thorough discussion of methods, challenges and evidence of any software used/code written.

 DN:   

Insightful blog posts about progress and analysis.

Completion and detailed report of all actionables.

Report of practical component with discussion of findings.

CR:   

Consistent standard level blog posts about progress.

Completion and detailed report of at least four topics from actionable #1, and completion of all other actionables.

Standard report of practical component findings. 

PS:   

Some blog posts about progress and analysis.

Completion of one actionable with evidence.

Evidence of significant time dedicated to project. 

FL:   

Unsatisfactory blogs

So based on some research from various sites and news articles, as well as my own experience and previous knowledge, the consensus seems to be ~1 hour. Between the connection of a new device and infection. This does of course vary, based on the age of the operating system, the operating system itself and just external factors.