Wi-Fi Electronic Warfare

Admiral Valdemar · Post by **Admiral Valdemar** » 2004-05-17 02:07pm

Wi-Fi networks can be jammed from PDAs

17:17 17 May 04

NewScientist.com news service

Wi-Fi networks can be jammed using nothing more sophisticated than a PDA and an off-the-shelf wireless networking card, the Australian Computer Emergency Response Team has warned.

Wi-Fi networks are becoming common in workplaces and elsewhere and it was known that they are vulnerable to jamming. It was thought that this would require the use of large, powerful and expensive equipment, but students at the Queensland University of Technology have now proved this wrong.

AusCERT says attacks will be hard to foil because the problem exploited is inherent in the Wi-Fi protocol. However, such an attack can only deny access to the network - it will not enable hackers to access user's data or computers.

The problem stems from how the Wi-Fi networks allocate transmission channels. As in many other networks, Wi-Fi nodes check to see if other devices are transmitting on the same frequency band before they begin sending data, to avoid "collisions" that occur when two or more devices talk simultaneously.

Like a conversation among a group of people, this works well as long as all devices are well-behaved. But it breaks down if one person or one device insists on talking loudly and continually. In essence, the Wi-Fi jamming is a denial of service attack.

Modest power

Unlike wired networks, wireless networks are accessible to any transmitter within range at the right frequency. The Queensland students showed that a PDA and wireless networking card could be combined to transmit in the required band.

Any Wi-Fi devices within range would detect the jamming signal and stop transmitting for as long as the jamming continued.

The wireless cards can only generate modest power and so will have a range limited to about 30 metres, estimates Frank Hanzlik, managing director of the US-based Wi-Fi Alliance. But the jamming signals need only be within range of one access point to affect all the computers associated with that network.

"As far as we can tell it's a denial of service capability, something that could affect any wireline or wireless network," Hanzlik told New Scientist. "The point is that are there are some low-cost commodity products that allow someone to effect it."

He adds that network operators with sophisticated management tools should be able to spot and shut down jammed access points so the rest of the network can function - and dispatch security personnel to investigate the jammed access point.

Jeff Hecht

Post by **Dalton** » 2004-05-17 03:10pm

I wonder if this would work for cellphones?

InnocentBystander · Post by **InnocentBystander** » 2004-05-17 03:41pm

You can jam anything. Hell, all it takes is a microwave or a 2.4ghz phone in the same house to jam 802.11a/b/g. Just flood the airways with garbage, similar to a Denial of Service attack really.

phongn · Post by **phongn** » 2004-05-17 04:50pm

I read about this awhile ago (I think on Slashdot). There may not be a real way around this other than turning off the jamming due to the design of 802.11.

Post by **Sea Skimmer** » 2004-05-17 05:02pm

Dalton wrote:I wonder if this would work for cellphones?

I don't think so, given that there are about five hundred cell phone frequencies.

Post by **RogueIce** » 2004-05-17 05:04pm

Damn, I'd be tempted to say this is what's wrong with my wireless at home (something jacking it up like that) except my desktop doesn't work either when connected with the router (directly conected via the wires, so I don't see how bad signals or whatnot would affect that, unlike with my laptop in my room).

Must just be my damn router. *sigh*

Seggybop · Post by **Seggybop** » 2004-05-17 08:29pm

If you used parabolic focusing on your access point, you could direct the signal only towards specific areas (where a computer is). The enemy would have to determine the line of sight of the antenna in order to attack. But the problem is that it kills a lot of the advantages of wireless...

TrailerParkJawa · Post by **TrailerParkJawa** » 2004-05-18 02:40am

Can you imagine being the poor tech who gets a call from a customer who keeps blaiming your product when in reality they are victims of an attack.

InnocentBystander · Post by **InnocentBystander** » 2004-05-18 02:57am

Seggybop wrote:If you used parabolic focusing on your access point, you could direct the signal only towards specific areas (where a computer is). The enemy would have to determine the line of sight of the antenna in order to attack. But the problem is that it kills a lot of the advantages of wireless...

I happen to like the pringles myself

Admiral Valdemar · Post by **Admiral Valdemar** » 2004-05-18 03:53am

Probably a good reason to develop that Ultra Wide Band (UWB) technology further then.

phongn · Post by **phongn** » 2004-05-18 10:03am

Admiral Valdemar wrote:Probably a good reason to develop that Ultra Wide Band (UWB) technology further then.

If the overlying protocol for UWB is similar in nature to WiFi, then this type of attack can still happen. IIRC, the group that designed WiFi determined that they'd need a huge chunk of bandwidth and a lot of power to circumvent such attacks (in this case, but more or less allocating each device individual frequencies and authenticating them at an RF-level)