Web Proxies, VPNs, and Tor: Anonymity, Security, and Privacy

The assignment content discusses the importance of security and anonymity in online activities. It highlights the risks associated with manual investigations, rogue access points (APs), and unprotected IP addresses. The content also explains the role of web proxies, virtual private networks (VPNs), and Tor in maintaining online privacy and security. Additionally, it references various studies and publications that support the significance of internet security and anonymity.

Running head: ADVANCE NETWORK SECURITY
Advance Network Security
Name of the student
Name of the university
Author’s Note
Table of Content

1ADVANCE NETWORK SECURITY
s
Question 1..................................................................................................................................2
WPA...............................................................................................................................2
Transmission Power, Range and Antenna.....................................................................2
Antenna..............................................................................................................2
Transmission Power...........................................................................................3
Access Point Positioning/Signal Range.........................................................................4
RADIUS Authentication................................................................................................5
Manual Detection of Rough Access Point.....................................................................6
Question 2..................................................................................................................................7
Web Proxies...................................................................................................................7
VPN................................................................................................................................7
Tor..................................................................................................................................8
References................................................................................................................................11

2ADVANCE NETWORK SECURITY
Question 1
WPA
WPA stands for Wi-Fi Protected Access is nothing but a security standard which is
mainly used for computing devices with wireless connection of internet or in other words Wi-
Fi. It is considered as the developed standard of Wi-Fi that is Wired Equivalent Privacy
(WEP). In comparison to WEP, WAP provides more sophisticated way of encrypting data.
WPA method of encryption is considered as the temporal key integrity protocol (TKIP).
TKIP mainly consists of various functions like packet mixing, message integrity checks.
WAP is considered to provide stronger version of authentication using 802.10x and
extensible Authentication protocol. WPA mainly rely on central authentication server like
Radius for allowing the users to enter into any network. In the year 2003 software updates
were available that allow both server and client computers for the implementation of WPA.
Access points are available which can operate in both the modes like WEP/WAP to provide
support to both of its WEP and WPA customers and client.
Transmission Power, Range and Antenna
Antenna
The industrial facility default receiving wires that accompany an entrance point, for
the most part, have low pick up around 2dB. On the off chance that the entrance point has
removable receiving wires, supplanting the default reception apparatuses with higher increase
omnidirectional or directional radio wires support run. For instance, supplanting a standard
two dBi receiving wire with a six dBi omnidirectional radio wire adequately adds 4 dB to the
flagging quality all through the scope zone. The aftereffect of including this pick up enhances
the flagging quality at place B enough to keep up 15 dB SNR when contrasted with just 9 dB
is utilising the standard two dBi radio wire. Accordingly, the expansion in reception
apparatus pick up has given more noteworthy range to a particular information rate that

3ADVANCE NETWORK SECURITY
relates to 15 dB SNR. A higher-pick up reception apparatus, introduced for example on an
entrance point, enhance run from the entrance point to the customer radio and from the
customer radios to the entrance point. This is unique about expanding transmit control on just
the entrance point, which would just build run for the interchanges going from the entrance
point to the customer radios. The point is that a higher-pick up receiving wire enhances
extend in the two headings is that the higher pick up of the radio wire enhances both
transmission and gathering of radio waves. In this manner, the establishment of higher-pick
up receiving wires can give huge increments in run without rolling out improvements to the
customer radios. Notwithstanding utilising higher-pick up reception apparatuses, receiving
assorted wire variety can likewise help broaden run in the two bearings since it limits
multipath spread. Assorted variety is a vital piece of 802.11n, and different merchants offer
802.11n access focuses and customer radios that have distinctive levels of decent variety. If
you aim to boost run, pick parts that have large amounts of assorted variety.
Transmission Power
The frequency band of 802.11 operates from low frequency to high frequency of the
band. Different frequencies are transmitted through this channels, on the contrary there is
negligible effect on the range for lower band of frequency to higher band of frequency and
this totally works on the principle that increases in frequency results in short range and vice-
versa. The range does not get effect if any channel between 1 and 11 is chosen in 2.4 GHz
band. Difference in range cannot be seen when various frequencies are spread in the band. To
avoid radio channel interference, the choice of transmission signal must be good enough. For
example, if there is set of channel 11 founded on the spectrum analyser and there is
significant amount interference in the band. The lower part of the band channel 1 and 3 may
be free from interference. Improvement of range can be seen by changing the access point to
channel 1 which ultimately improves the SNR value throughout the area. For example it is

4ADVANCE NETWORK SECURITY
seen that the noise level of channel 1 is 6db which is a lower value in comparison to channel
11.
Access Point Positioning/Signal Range
Since the receiving wire transmits and gets radio signs, they are defenceless to RF
checks and regular wellsprings of obstruction that can lessen throughput and scope of the
gadget to which they are associated. Take after these rules to guarantee an ideal execution:
Keep the reception apparatus far from metal impediments, for example, warming and aerating
and cooling channels, huge roof trusses, building superstructures, and real power cabling
runs. If fundamental, utilise an unbending course to bring down the radio wire far from these

5ADVANCE NETWORK SECURITY
hindrances. Mount the radio wire to use its proliferation qualities. One approach to do this is
to arrange the reception apparatus vertically and mount it as high as could reasonably be
expected. The thickness of the materials utilised as a part of a building's development decides
the quantity of dividers the flag must go through and still keep up satisfactory scope.
Consider the accompanying before picking the area to introduce your reception apparatus: A
flag can enter five or six dividers developed of drywall or wood. A steel fence or wire work
separated in the vicinity of 1 and 1/2 in. (2.5 and 3.8 cm) goes about as a consonant reflector
that hinders a 2.4-GHz radio flag. A thick metal divider makes signals reflect off, causing
poor infiltration. Concrete and wood square dividers restrict flag entrance to three or four
dividers. Paper and vinyl dividers have next to no effect on flag infiltration. Solid and pre-
thrown solid dividers restrain flag infiltration to maybe a couple of dividers without debasing
scope. Install the receiving wire in a vertical introduction to amplify flag proliferation. Install
the receiving wire far from microwave broilers and 2-GHz cordless telephones. These items
can cause flag impedance since they work in a similar recurrence run as the gadget your
receiving wire is associated with.
RADIUS Authentication
When setting up a WiFi arrange at home, you commonly set up a SSID and
watchword, acknowledge the defaults for some other choices, and be finished with it. You
share the watchword with family and guests, and everybody is upbeat. Business WiFi is
somewhat extraordinary. On the off chance that you set up a WiFi arrange for your business
with a solitary secret word for all staff and guests, that watchword, in the long run, spills out,
and individuals can sign on to your WiFi organise whenever. The circumstance is particularly
awful if the WiFi organise gives clients access to delicate data, for example, financials,
licensed innovation, and client records. You could change the secret WiFi key once in a
while, however then you need to offer it to all the staff so they can sign in once more, and the

6ADVANCE NETWORK SECURITY
issue starts from the very beginning. There's a superior way: WiFi confirmation with
RADIUS. Before digging into what RADIUS is and how it functions, how about we
investigate what it gets you:
Extensive variety of execution alternatives. The range can be actualised as a devoted
on-introduce server, utilising obtained RADIUS server programming or a free/open-source
choice, for example, Free RADIUS. Many system gadgets and server working frameworks
have RADIUS implicit, so no additional product or equipment buy is required. There are
additionally cloud-based RADIUS administrations accessible, which can free you from the
framework setup and support assignments inside and out. This is exceptionally appealing to
littler associations with restricted IT staff and spending plan.
Match up with LDAP/Active Directory. The framework can be set up with the goal
that the clients' system index passwords are utilised to confirm on the Wi-Fi organise,
empowering single sign-on for clients.
Individualized validation. Every client or gadget is appointed novel qualifications for
getting to the Wi-Fi arrange. No more watchword sharing, as every client deals with his or
her particular certifications.
Manual Detection of Rough Access Point
Any AP other than approved AP is a rebel. System availability of AP to big business
organize is not a measure for maverick location. Head should carefully physically isolate out
inviting neighbour APs. The manual investigation should be done on continuous premise as
new neighbourhood APs fly up, and old ones are reconfigured. When you turn on Rogue AP
Detection in the WG302, the AutoCell Enabled AP consistently examines the remote system
and gathers data about all APs heard on their channel. The data gathered incorporates SSID,
MAC Address, Channel, and AutoCell Enabled. The client can approve an unidentified AP,

7ADVANCE NETWORK SECURITY
Save the Authorized APs into a document, Import the past Authorized APs from a record. If a
manual investigation is not quickly and routinely done, it makes security gap. Obviously, that
programmed anticipation of maverick APs can't be turned on as executive should first choose
if a recently recognised AP is on the system or only a benevolent neighbourhood AP. For
improved security, you can filter the remote system to identify maverick access focuses.
Distinguishing Rogue AP's includes examining the remote condition on every single
accessible channel searching for unidentified AP's. Specifically, unidentified AP's that are
utilising the SSID of a true blue system can show a genuine security danger.
Question 2
Web Proxies
A web proxy is a web server that enables you to surf the web without uncovering your
IP deliver to the outside world. You might ponder what hurt it could do if others knew your
IP address. Sufficiently genuine, it, for the most part, won't make any difference. In any case,
there can be an issue if a programmer runs over your IP. PC programmers are continually
scouring the web, searching for unprotected IP addresses. When they discover one, they will
dependably attempt to hack into it, frequently with pernicious goal. Proxy servers can go
about as obstructions to their exercises. All proxy servers as a rule work in a comparable
procedure. To begin with, you need to visit the landing page of the proxy server site and sort
the URL of the site you need to surf in the inquiry box of the proxy. If the URL is a
substantial one, at that point, the proxy server will get the comparing website page and show
it. From that point forward, you can surf the site similarly as you would without the proxy.

8ADVANCE NETWORK SECURITY
The procedure may take somewhat more time than common on the first occasion when you
get to the site since the proxy will store the documents of the site as it brings those.
Fig1: Web Proxy
VPN
VPNs stands for Virtual Private Networks which merely provides the clients to get
into the system and any other information which can be accessed through any open system.
Building up one of these safe associations—say you need to sign into your private corporate
system remotely—is shockingly simple. VPNs works in similar way that of Firewall in PCs.
VPN is nothing but a WAN (Wide Area Network) and the front is similar to that which holds
usefulness, security and any other appearance in a private system. The client initially
interfaces with general society web through an ISP, at that point starts a VPN association
with the organisation VPN server utilising customer programming. Furthermore, that is it!
The customer programming on the server builds up the safe association, allows the remote
client access to the inner system. Thus, VPNs are tremendously famous with organizations as
methods for protecting delicate information while using remote server farms. These systems
are ending up progressively regular among singular clients—and not simply torrenters. Since
VPNs utilise a mix of devoted relation and encryption conventions to create virtual P2P
associations, regardless of the possibility that snoopers managed to redirect a portion of the
sent information, they'd be not able to access it due to encryption. Likewise, VPNs enable
people to check their physical area—the client's real IP address is provided by VPN supplier
—enabling them to use content channels.

9ADVANCE NETWORK SECURITY
Fig2: Virtual Private Network
Tor
Tor is an Internet organising convention intended to anonymise the information
transmission crosswise over it. It will be troublesome to use Torrent products if it is certainly
feasible, for any problem detection over webmail, look history, web-based social networking
posts or other online movements. They additionally won't have the capacity to tell which
nation you're in by investigating your IP address, which can be differently valuable for
writers, activists, representatives and that's just the beginning. The Tor arrange goes through
the PC servers of thousands of volunteers all through the world. Your information is encoded
into a parcel when it enters the Tor organise. At that point, dissimilar to the case with typical
Internet associations, Tor claims to strips away a piece of the packet's header, which is a part
of the tending to data that could be utilised to gain information about the sender, for example,
the working framework at which the message was sent. At long last, Tor encodes whatever is
left of the tending to data, called the bundle wrapper. The indirect way parcels go through the
Tor organise much the same as a man taking a circuitous way through a city to shake a
follower. Each transfer decodes sufficiently just of the information bundle wrapper to know
which hand-off the information originated from, and which hand-off to send it to next. The
transfer then rewraps the bundle in another wrapper and sends it on. In Tor, they are, which
conceals the sender and recipient of a given transmission. Further, if you utilise the Tor
Browser to visit a site that does not utilise encryption to secure clients' associations, at that
point your information parcel won't be scrambled when it influences the last bounce from the
last Tor to hand-off to the site's server. That is on account of the information bundle's goal

10ADVANCE NETWORK SECURITY
lies outside the Tor arrange. So it's best to make sure that a site offers some SSL or TLS
encryption, for the most part, meant by a "https" rather than just "HTTP" in the Web address,
before attempting to get to it secretly. The layers of encoded deliver data used to anonymise
information bundles sent through Tor are reminiscent of an onion, subsequently the
nameSome standard Internet information parcels are encoded utilising a convention called
Secure Socket Layer (SSL) or its more current, more grounded cousin Transport Layer
Security (TLS). For instance, if you present your Visa data to an online store, that data
traversed the system in an encoded state to counteract robbery. In any case, notwithstanding
when you utilise SSL or TLS, it's as yet feasible for others to block those parcels and see the
data's metadata — who sent that scrambled data and who got it — because the tending to
wrappers in SSL or TLS is not encoded.

11ADVANCE NETWORK SECURITY
References
Ball, J., Borger, J. and Greenwald, G., 2013. Revealed: how US and UK spy agencies defeat
internet privacy and security. The Guardian, 6.
Cecere, G., Le Guel, F. and Soulié, N., 2015. Perceived internet privacy concerns on social
networks in Europe. Technological Forecasting and Social Change, 96, pp.277-287.
Fong, K.K.K. and Wong, S.K.S., 2013. Exploring the Weak Links of Internet Security: A
Study of WiFi Security in Hong Kong. Network and Communication Technologies, 2(2),
p.17.
Gounaris, G., 2014. WiFi security and testbed implementation for WEP/WPA cracking
demonstration.
Hong, W. and Thong, J.Y., 2013. Internet privacy concerns: An integrated conceptualization
and four empirical studies.
Jacobs, R.N. and Li, M., 2017. Culture and comparative media research: Narratives about
Internet privacy policy in Chinese, US, and UK newspapers. The Communication
Review, 20(1), pp.1-25.
Jing, Q., Vasilakos, A.V., Wan, J., Lu, J. and Qiu, D., 2014. Security of the internet of things:
Perspectives and challenges. Wireless Networks, 20(8), pp.2481-2501.
Kernighan, B.W., 2017. Understanding the Digital World: What You Need to Know about
Computers, the Internet, Privacy, and Security. Princeton University Press.
Khadraoui, Y., Lagrange, X. and Gravey, A., 2016, May. Very Tight Coupling between LTE
and WiFi: a Practical Analysis. In CoRes 2016.

12ADVANCE NETWORK SECURITY
Sagers, G., Hosack, B., Rowley, R.J., Twitchell, D. and Nagaraj, R., 2015, January. Where's
the Security in WiFi? An Argument for Industry Awareness. In System Sciences (HICSS),
2015 48th Hawaii International Conference on(pp. 5453-5461). IEEE.
Xiong, J. and Jamieson, K., 2013, September. Securearray: Improving wifi security with fine-
grained physical-layer information. In Proceedings of the 19th annual international
conference on Mobile computing & networking (pp. 441-452). ACM.
Young, A.L. and Quan-Haase, A., 2013. Privacy protection strategies on Facebook: The
Internet privacy paradox revisited. Information, Communication & Society, 16(4), pp.479-
500.