Question

Question 1
After being hired as an IT consultant by a small business, you discover that it is using old hardware that relies on WEP encryption. Explain the difference between WEP and WPA2 encryption. Then, make the case that your client should invest in a technology update.

Question 2
Explain why you should never connect to an unsecured wireless network.

Question 3
Describe at least one unique vulnerability or concern that you may have for portable devices that you would not worry about for traditional desktop computers.

Question 4
Explain how the attack surface for hardware requires a different set of solutions than the attack surface for software, data, or a network.

Question 5
What is one common avenue of attack shared across all attack surfaces—hardware, software, network, and data?

Answer 1

Question 1 — WEP vs WPA2, and why upgrade

Difference between WEP and WPA2
- WEP (Wired Equivalent Privacy)
- Uses RC4 stream cipher with a 24-bit IV (initialization vector).
- IV reuse and small IV space lead to key reuse and easy cryptanalysis.
- Authentication is weak and can be bypassed. Tools can recover WEP keys in minutes.
- Considered deprecated and effectively broken; no realistic expectation of confidentiality or integrity.
- WPA2 (Wi‑Fi Protected Access 2)
- Uses AES-based encryption (CCMP) and stronger cryptographic primitives.
- Supports stronger authentication modes (WPA2‑Personal with strong passphrase; WPA2‑Enterprise with RADIUS/EAP).
- Provides much stronger protection against eavesdropping, replay, and forgery.
- Widely supported and maintained; security recommendations exist for configuration (disable WPS, use strong passphrases, keep firmware updated).

Why your client should invest in an upgrade
- WEP is trivial to break: attackers can capture a small amount of traffic and recover keys quickly. That exposes customer data, internal credentials, and business systems.
- Risk to business: data breach, financial loss, regulatory non‑compliance, reputational damage, liability if customer data is exposed.
- Cost/benefit: modern access points and routers with WPA2 (or WPA3) are inexpensive compared to potential breach costs. Replacing APs and configuring secure Wi‑Fi is a one‑time or periodic cost that greatly reduces risk.
- Practical steps to take:
- Replace WEP‑only hardware with devices supporting WPA2 (ideally WPA3-capable).
- Use WPA2‑Enterprise if you need per-user authentication; otherwise use a strong WPA2‑Personal passphrase.
- Disable WPS, enable firmware auto‑updates, segment guest Wi‑Fi from corporate network, enforce strong passwords/2FA.
- Consider device inventory and replace any clients that cannot support modern security (or isolate them on a separate VLAN).
- Bottom line: Upgrading eliminates a critical, easily exploited weakness and protects business continuity and data — making it an urgent, cost‑effective investment.

Question 2 — Why you should never connect to an unsecured wireless network
- No encryption between you and the access point: traffic (including credentials, email, and other sensitive data) can be intercepted and read.
- Man‑in‑the‑middle and session hijacking: attackers can intercept cookies, session tokens, or modify traffic to capture logins.
- Evil‑twin attacks: attackers can create fake hotspots with familiar SSIDs to trick users into connecting.
- Malware distribution and network reconnaissance: attackers on the same open network can probe devices, exploit unpatched services, or push malicious files.
- DNS or traffic redirection: attackers can inject or spoof DNS responses to redirect you to malicious sites.
- Mitigations if you must use public Wi‑Fi: use a reputable VPN, ensure HTTPS, disable network sharing, use host‑based firewall, forget the network afterwards, and prefer cellular data for sensitive transactions.

Question 3 — Unique vulnerability for portable devices not typical for desktops
- Physical loss/theft leading to data compromise
- Portable devices are routinely lost or stolen. A stolen laptop, tablet, or phone gives an attacker physical access and potential direct access to stored credentials, email, business data, or corporate VPN tokens.
- Desktop machines in controlled offices are less likely to be taken offsite and are more often protected by physical controls.
- Why this is special and mitigations:
- Encrypt storage (full‑disk/volume encryption like BitLocker or FileVault).
- Enforce strong device PINs/passwords and automatic lock timeouts.
- Use remote wipe, device location tracking, and Mobile Device Management (MDM) policies.
- Limit local credential storage, require 2FA for sensitive services, and separate corporate data (containerization).

Question 4 — How hardware attack surfaces differ and need different solutions
- Nature of hardware attack surface
- Includes physical tampering, supply‑chain compromise, firmware/BIOS/UEFI vulnerabilities, hardware trojans, side‑channel and fault‑injection attacks, DMA/JTAG access, and device cloning.
- Hardware often has long lifecycles and may be immutable or expensive to replace if compromised.
- Attacks can be stealthy (e.g., malicious microcode, compromised components) and survive OS reinstalls.
- Why solutions differ from software/network/data controls
- Physical controls: locks, secure storage, tamper‑evident or tamper‑resistant casings, secure disposal, and controlled supply chain logistics.
- Hardware roots of trust: TPM, secure boot, measured boot, and cryptographic attestation to ensure firmware/boot integrity.
- Firmware security: digitally signed firmware updates and strict update policies, because firmware compromise is not solved by standard software patching alone.
- Supply‑chain security: vet suppliers, use trusted foundries, chain‑of‑custody, component provenance, and testing for counterfeit or malicious components.
- Detection/response differences: hardware compromises often require forensic hardware analysis and may necessitate replacement; software compromises can often be patched or reinstalled.
- Complementary controls for other surfaces:
- Software: secure coding, patch management, runtime protections, antivirus/EDR.
- Network: segmentation, IDS/IPS, encryption, access controls.
- Data: encryption at rest/in transit, DLP, backups, access policies.
- Summary: Hardware security requires physical, lifecycle, and manufacturing controls plus cryptographic attestation that are distinct from the primarily logical controls used for software, network, and data.

Question 5 — One common avenue of attack across all attack surfaces
- Social engineering / credential compromise (phishing, pretexting)
- Why it spans all surfaces: stolen credentials or tricked users can give attackers software access (malware installs), network access (VPN or Wi‑Fi logins), data access (cloud services, file shares), and even physical access (convincing staff to grant entry or hand over devices).
- Example impacts:
- Hardware: attacker uses social engineering to coerce an employee into handing over a laptop or plugging in a malicious USB.
- Software: phishing leads to malware that runs with user privileges.
- Network: stolen Wi‑Fi credentials or VPN logins give access to internal network segments.
- Data: compromised credentials allow exfiltration of sensitive files or cloud data.
- Mitigations: user education, phishing tests, strong authentication (MFA), least privilege, strict onboarding/offboarding, and behavioral detection.

If you’d like, I can draft a prioritized action plan for your client: minimal immediate changes (stop using WEP), recommended hardware to buy, secure Wi‑Fi configuration steps, and device policies for portable devices.