WPA2 Enterprise Research Articles

Design and Evaluation of Wireless DYU Air Box for Environment-Monitoring IoT System on Da-Yeh University Campus

This paper presents an original wireless DYU Air Box of an environment-monitoring IoT (EMIoT) system on a campus to offer information on environmental conditions through the public ThingSpeak IoT platform for stakeholders including all the students and employees on the Da-Yeh University (DYU) campus in Taiwan. Firstly, the proposed wireless heterogeneous multi-sensor module aggregates BME680, SCD30, PMS7003, and BH1750 sensors with a TTGO ESP32 Wi-Fi device based on the I2C and UART interface standards of series communication. Through the DYU-802.1X Wi-Fi network with the WPA2 Enterprise security directly, the wireless multi-sensor monitoring module further forwards the observation data of environmental conditions on campus via the DYU-802.1X Wi-Fi network to the public ThingSpeak IoT platform, which is a cloud service platform to aggregate, visualize, and analyze live sensing data of air quality index (AQI), concentrations of PM1.0/2.5 and CO2, brightness, ambient temperature, and relative humidity (RH). The results illustrate the proposed DYU Air Box for monitoring the indoor environmental conditions on campus and validate them with sufficient accuracy and confidence with commercialized measurement instruments. In this work, the wireless smart environment-monitoring IoT system features monitoring and automatic alarm functions for monitoring AQI, CO2, and PM concentrations, as well as ambient illumination, temperature, and RH parameters and collaboration and interoperability through the Enterprise Intranet. All the organizational stakeholders interested in the environmental conditions of the DYU campus can openly access the information according to their interests. In the upcoming future, the information of the environmental conditions in the DYU campus will be developed to be simultaneously accessed by all the stakeholders through both the public ThingSpeak IoT platform and the private EMIoT system.

Implementasi WPA2 Enterprise dan LDAP Dalam Membangun Sistem Informasi Kehadiran Karyawan

Technological developments have a positive effect on agencies and companies, one of which is the innovation of employee attendance registration using the internet network media. Employee attendance system model using internet network will certainly make it easier to control employee attendance. The internet network is an important part of every agency in helping its performance and can also be used as an attendance system. WPA2 Enterprise implementation is used as authentication using the provided email and password. Devices that have been connected to the network will automatically be recorded in the employee attendance system. The implementation of WPA2 Enterprise requires freeradius assistance in processing authentication data from employees which will then be verified again through LDAP, in this case UNESA uses Google LDAP. The attendance system by implementing WPA2 Enterprise has been tested by implementing the Technology Acceptance Model (TAM) method resulting in 43% answering strongly agree and 56% answering agreeing. The analysis is based on 78 employees who gave their assessments. Based on the results of the acceptance analysis of the system, it is stated that it can be applied at UNESA.

Enterprise wi-fi

Seeking to increase awareness of WPA2 Enterprise network security technology flaws and reduce risk to users.

Evil twins and WPA2 Enterprise: A coming security disaster?

WPA2 Enterprise is a suite of protocols for secure communication in a wireless local network and has become an essential component of virtually every enterprise. In many practical deployments of this technology, a device that authenticates with username and password is at risk of leaking credentials to fraudulent access points claiming to be the enterprise network (evil twins) that may be placed virtually anywhere. While this kind of vulnerability is well known to practitioners, we believe these issues deserve a fresh look because the current technological landscape has magnified the corresponding risks. Convergence of organizations toward single sign-on architectures in which a single set of credentials unlock access to all services of the organizations, coupled with the huge diffusion of wifi-enabled personal devices which often contain enterprise credentials and that connect to wifi networks automatically, have made attacks aimed at stealing network credentials particularly attractive to attackers and hard to detect. In this paper we intend to draw the attention of the research and technological community on this important yet, in our opinion, widely underestimated risk. We also suggest a direction for investigating practical solutions able to offer stronger security without requiring any overhaul of existing protocols.

Building secure wireless access point based on certificate authentication and firewall captive portal

Wireless local area network or WLAN more vulnerability than wired network even though WLAN has many advantages over wired. Wireless networks use radio transmissions to carry data between end users and access point. Therefore, it is possible for someone to sit in your office building's lobby or parking lot or parking lot to eavesdrop on the wireless network communication. This paper discussed securing wires local area network used WPA2 Enterprise based PEAP MS-CHAP and Captive portal firewall. We also divided the network for employer and visitor to increase the level of security. Our experiment showed that the WLAN could be broken using the attacker tool such as airodump, aireply, and aircrack.

Demo

We present a demo of Odin, an SDN framework to program enterprise wireless local area networks (WLANs). Enterprise WLANs need to support a wide range of services and functionalities. This includes authentication, authorization and accounting, policy, mobility and interference management, and load balancing. WLANs also exhibit unique challenges. In particular, access point (AP) association decisions are not made by the infrastructure, but by clients. In addition, the association state machine combined with the broadcast nature of the wireless medium requires keeping track of a large amount of state changes. To this end, Odin builds on a light virtual AP abstraction that greatly simplifies client management. Odin does not require any client side modifications and its design supports WPA2 Enterprise. With Odin, a network operator can implement enterprise WLAN services as network applications.

A COMPARISON OF WIRELESS SECURITY PROCEDURES: SECURITY COUPLED WITH EASE OF IMPLEMENTATION FOR A COLLEGE CAMPUS

Currently wireless networks are virtually everywhere and though security is easily configurable some people opt to leave their wireless networks unsecured. There are many blogs and columns available online as to what security measure is the best to implement and when, however very few articles actually compare and contrast methods side by side. In this paper we hope to accomplish just by researching the pros and cons of each method and proposing which method should be implemented depending on the situation. Based on your needs the victor from comparison was WPA2 Enterprise, hence we built a RADIUS server and attempted to integrate it into this newly secured network. We then utilized a Microsoft Windows 7 laptop to attempt to connect to the network. Then finally we tested each security measure’s effect on performance due to the different methods of encryption. We found that RADIUS servers are somewhat complex to setup and integrate with WPA2 Enterprise, hence we propose the use of WPA2 Personal with AES encryption; the second most secure method that does not hamper performance and is relatively simple to configure and implement. Therefore, this research lends itself to verifying what was found on the blog sites and columns as to which method offers the best security while remaining simple to set up.