MAIN TOPICS

1.0 Security Policy

• Define WLAN security Requirement
  • Evaluate and incorporate business, technical, and applicable regulatory policies (for example, PCI-DSS, HIPAA, GPDR)
  • Involve appropriate stakeholders
  • Review client devices and applications
  • Review WLAN infrastructure devices
• Develop WLAN security policies
  • Translate security requirements to high-level policy statements
  • Write policies conforming to common practices including definitions of enforcement and constraint specification
  • Ensure appropriate approval and support for all policies
  • Implement security policy lifecycle management
• Ensure proper training is administered for all stakeholders related to security policies and ongoing security awareness

2.0 Vulnerabilities, Threats, and Attacks

• Identify potential vulnerabilities and threats to determine the impact on the WLAN and supporting systems and verify, mitigate, and remediate them
  • Use information sources to identify the latest vulnerabilities related to a WLAN including online repositories containing CVEs
  • Determine the risk and impact of identified vulnerabilities
  • Select appropriate actions to mitigate threats exposed by vulnerabilities
    • Review and adjust device configurations to ensure conformance with security policy
    • Implement appropriate code modifications, patches and upgrades
    • Quarantine unrepaired/compromised systems
    • Examine logs and network traffic where applicable
  • Describe and detect possible, common WLAN attacks including eavesdropping, man-in-the-middle, cracking, phishing, and social engineering attacks
  • Implement penetration testing procedures to identify weaknesses in the WLAN
    • Use appropriate penetration testing processes including scope definition, information gathering, scanning, attack, and documentation procedures
    • Select and use penetration testing tools including project documentation, scanners, hardware tools, Kali Linux, protocol analyzers, WLAN auditing tools (software and hardware)
  • Implement network monitoring to identify attacks and potential vulnerabilities
    • Use appropriate tools for network monitoring including centralized monitoring, distributed monitoring, and Security Information Event Management (SIEM) systems
    • Implement mobile (temporary), integrated and overlay WIPS solutions to monitor security events
• Describe and perform risk analysis and risk mitigation procedures
  • Asset management
  • Risk Ratings
  • Loss expectancy calculations 2.2.4 Develop risk management plans for WLANs
  • Develop risk management plans for WLANs

3.0 WLAN Security Design and Architecture

• Select the appropriate security solution for a given implementation and ensure it is installed and configured according to policy requirements
  • Select and implement appropriate authentication solutions
    • WPA/WPA2-Personal (Pre-Shared Key)
    • WPA/WPA2-Enterprise
    • WPA3-SAE and 192-Bit enterprise security
    • 802.1X/EAP
  • Understand the capabilities of EAP methods including EAP-TLS, EAP-TTLS, PEAP, EAP-FAST, EAP-SIM, and EAP-GTC
  • Guest access authentication
• Select and implement appropriate encryption solutions
  • Encryption methods and concepts
  • TKIP/RC4
  • CCMP/AES
  • SAE and 192-bit security
  • OWE
  • Virtual Private Network (VPN)
• Select and implement wireless monitoring solutions
  • Wireless Intrusion Prevention System (WIPS) – overlay and integrated
  • Laptop-based monitoring with protocol and spectrum analyzers
• Understand and explain 802.11 Authentication and Key Management (AKM) components and processes
  • Encryption keys and key hierarchies
  • Handshakes and exchanges (4-way, SAE, OWE)
  • Pre-shared keys
  • Pre-RSNA security (WEP and 802.11 Shared Key authentication)
  • TSN security
  • RSN security
  • WPA, WPA2, and WPA3
• Implement or recommend appropriate wired security configurations to support the WLAN
  • Physical port security in Ethernet switches
  • Network segmentation, VLANs, and layered security solutions
  • Tunneling protocols and connections
  • Access Control Lists (ACLs)
  • Firewalls
• Implement authentication and security services
  • Role-Based Access Control (RBAC)
  • Certificate Authorities (CAs)
  • AAA Servers
  • Client onboarding
  • Network Access Control (NAC)
  • BYOD and MDM
• Implement secure transitioning (roaming) solutions
  • 802.11r Fast BSS Transition (FT)
  • Opportunistic Key Caching (OKC)
  • Pre-Shared Key (PSK) – standard and per-user
• Secure public access and/or open networks
  • Guest access
  • Peer-to-peer connectivity
  • Captive portals
  • Hotspot 2.0/Passpoint
• Implement preventative measures required for common vulnerabilities associated with wireless infrastructure devices and avoid weak security solutions
  • Weak/default passwords
  • Misconfiguration
  • Firmware/software updates
  • HTTP-based administration interface access
  • Telnet-based administration interface access
  • Older SNMP protocols such as SNMPv1 and SNMPv2

4.0 Security Life Cycle Management

• Understand and implement management within the security lifecycle of identify, assess, protect, and monitor
  • Identify technologies being introduced to the WLAN
  • Assess security requirements for new technologies
  • Implement appropriate protective measures for new technologies and validate the security of the measures
  • Monitor and audit the new technologies for security compliance (Security Information Event Management (SIEM), portable audits, intrastructure-based audits, WIPS/WIDS)
• Use effective change management procedures including documentation, approval, and notifications
• Use information from monitoring solutions for load observation and forecasting of future requirements to comply with security policy
• Implement appropriate maintenance procedures including license management, software/code upgrades, and configuration management
• Implement effective auditing procedures to perform audits, analyze results, and generate reports
  • User interviews
  • Vulnerability scans
  • Reviewing access controls
  • Penetration testing
  • System log analysis
  • Report findings to management and support professionals as appropriate