December 15, 2004
Book Review- Wi-Foo: The Secrets of Wireless Hacking
Wi-Foo: The Secrets of Wireless Hacking
(Vladimirov, Andrew, et. Al; Addison Wesley, June 2004; ISBN 0-321-20217-1, 592 pages)
There are a lot of WiFi security books out there, but most of them are shallow rehashes of basic security issues without a lot of hands-on depth.
One test I use to test the mettle of a WiFi security tome is to see what is says about VPN encryption. If you don�t already know, VPN encryption is the only way to reliably protect WiFi network traffic; WEP, WPA, and 802.11i all have serious flaws that make them vulnerable to attack.
Most WiFi guides make only a passing reference to VPN encryption. Wi-Foo passes my test by incorporating an entire chapter on VPNs, with detailed instructions on setting up VPN protection using open source components. This definitely piqued my interest in the rest of the book, and I wasn�t disappointed with what I found.
Wi-Foo is an insiders guide to securing wireless networks, taking the point of view of an attacker. The book teaches you about 802.11 network hardware software, and then graphically illustrates WiFi vulnerabilities by giving you detailed instructions on exploiting them. Some might worry that this amounts to a hacker�s instruction manual, but trust me � the real hackers have had this information for a long time.
Wi-Foo gives you a clear description of hacker processes without forcing you to go through the trouble of digging up the information online � something most hackers are willing to spend hours doing, but which most network security administrators can�t afford. The book describes Wardriving � the act of traveling around a city looking for victim networks � and how to attack prospective victims once you�ve found them. It then explains how to effectively thwart such attacks, how to select appropriate encryption algorithms for a given application, and how to monitor your now-secure network for intrusion attempts and potential breakins.
A series of appendices provide handy reference material on WiFi equipment and utilities, and an extremely useful penetration test plan that you can employ immediately to test your own WiFi security.
I�ve looked at every WiFi security book currently in U.S. publication, and this one is by far the best of the breed. It�s essential reading for every network security guru. If you aren�t a guru and don�t think you need all the information in this huge volume, it�s worth adding to your O�Reilly Safari bookshelf for a month of online reading.
The publisher�s site:
http://www.aw-bc.com/catalog/academic/product/0,1144,0321202171,00.html
Read the book online at O�Reilly�s Safari library:
http://safari.oreilly.com/JVXSL.asp?xmlid=0321202171
Posted by Mel Beckman at December 15, 2004 1:17 PM