CSG 5308 - Wireless Security Design for Rare Vintage Auto Parts Ltd

This case study presents a secure wireless network design for Rare Vintage Auto Parts Ltd (RVA), a company facing challenges with its current IT infrastructure, including unauthorized access, unreliable connectivity, and a lack of IT expertise. The document assesses RVA's existing systems and proposes an improved architecture with enhanced security features. It outlines the necessary hardware, software, and equipment for a secure wide area network with wireless connectivity, including a detailed plan for deploying an 802.11 wireless solution and mobile device integration. The study also includes a comprehensive risk analysis and countermeasures to protect RVA's IT systems and resources, addressing issues like weak encryption, broadcast SSID, and lack of a firewall or intrusion detection system, culminating in recommendations for appropriate policies and guidelines, including a BYOD policy, to ensure a secure and efficient network environment.

SECURE WIRELESS DESIGN FOR RARE VINTAGE AUTO PARTS LTD 1
Secure Wireless Design for Rare Vintage Auto Parts Ltd
Student Name
Date

SECURE WIRELESS DESIGN FOR RARE VINTAGE AUTO PARTS LTD 2
Introduction
Rare Vintage Auto parts Ltd (RVA) is an automotive parts supplier to car dealerships,
mechanics, and the mining industry and lately, supplies parts to enthusiastic motorists. RVA has four
offices and one warehouse where al stocks are stored; the inventory system is at the warehouse and
is accessed via expensive 512 Kbit lines. The shops are spread out geographically in Cockburn
central, Kalamunda, bayswater, and Cottesloe. RVA has in the recent past experienced some issues
regarding the smooth running of its businesses and this paper assesses its current infrastructure and
systems and proposes a better architecture for wireless access and connection with inbuilt security
features. Some of the issues include unauthorized access to restricted resources and a manager with
little IT skills and knowledge has been given the task of managing firms’ computer networks,
further creating more risks as human acts of omission and commission are some of the biggest IT
security risks. The connectivity to other shops and RVA’s other IT resources is also unreliable in
some cases, while in others, better connectivity is required. Based on the case scenario and a
description of the current standards and architectures used, this paper proposes a better design, with
justifications, for a secure wide area network that includes wireless connectivity for RVA. The
proposal includes a detaled software, hardware, and equipment plan required to attain a secure
interconnection between all the sites and in house too. It also includes detailed plans for deploying
an 802.11 wireless and mobile devices solution for RVA. The paper also undertakes a detailed risk
analysis and countermeasures to protect the RVA IT system and resources
Required Equipment, hardware, and Software to Achieve Secure interconnection
An IT arrange interfaces every one of your gadgets, in addition to other fringe hardware, for
example, printers
To assemble a system you will require a scope of gear including the accompanying:
Links and connectors. These connection together the PCs, printers, servers and other gear on
your system.
A switch. This oversees organize activity, guaranteeing gadgets can speak with each other by
means of both wired and remote associations, and gives web availability.
A remote access point (discretionary). This will broaden your remote system if the switch is
unequipped for offering scope in specific parts of the building.
A web association. This could be a quicker fiber association or devoted rented line.

SECURE WIRELESS DESIGN FOR RARE VINTAGE AUTO PARTS LTD 3
An equipment firewall. This makes a safe obstruction between your system and the web,
blocking security dangers. Systems some of the time incorporate an on location organize server
which runs focal applications, goes about as an email server and gives document stockpiling.
System equipment building pieces
A few organizations still form their system with links since they're exceptionally solid and
quick. The most widely recognized compose is Ethernet link, which is evaluated for speed. Feline 6
links can convey information sufficiently quick for any business reason. When constructing their
system most organizations introduce arrange attachments at helpful areas in their premises, so PCs
and different gadgets can be connected to the system. The attachments cost about £3 each.
The switch: a fundamental system segment
The switch goes about as signpost, showing where information on your system ought to go
and empowers gadgets to speak with each other. Switches likewise associate straightforwardly to
the web and offer the association by means of link or Wi-Fi with gadgets on the system.
Going remote
Switches likewise incorporate Wi-Fi ability, empowering individuals to associate PCs, cell
phones, tablets and different gadgets to the system remotely. Wi-Fi is perfect for furnishing system
access to staff with cell phones and in meeting rooms or normal zones. It's likewise valuable for
offering web access to guests, with numerous switches including a different 'visitor' arrange for the
reason.
System hardware speeds
Most system gear agrees to regular guidelines, so you can consolidate switches, links and
firewalls from various producers. Be that as it may, the speed of your system may be represented by
the slowest component. For instance, if every one of your links and PCs are evaluated to Cat 6,
ensure your switch is appraised to Cat 6 as well. There are various remote systems administration
measures to consider, in spite of the fact that the dominant part of present day gadgets will
incorporate help for the most recent forms. Endeavor to get a remote switch or access point
evaluated to 'Remote n' or '802.11n'; it's the speediest kind accessible, yet will at present work with
more seasoned remote hardware, as well. The key equipment segments of a remote PC organize
incorporate connectors, switches and get to focuses, reception apparatuses and repeaters.

SECURE WIRELESS DESIGN FOR RARE VINTAGE AUTO PARTS LTD 4
Remote Network Adapters
Remote system connectors (otherwise called remote NICs or remote system cards) are
required for every gadget on a remote system. All more up to date PCs, and cell phones join remote
ability as an implicit component of their frameworks. Isolate add-on connectors must be obtained
for more seasoned PC PCs; these are accessible in either PCMCIA "Mastercard" or USB frame
factors. Unless you are running old equipment, you can set up a remote system without stressing
over system connectors. To build the execution of system associations, suit more PCs and gadgets,
and increment the system's range, different kinds of equipment are required.
Remote Routers and Access Points
Remote switches are the core of the remote system. They work equivalently to customary
switches for wired Ethernet systems. You require a remote switch when fabricating an all-remote
system at home or office. The present standard for remote switches is 802.11ac, which convey
smooth video gushing and responsive web based gaming. More established switches are slower, yet
at the same time, work, so the switch decision can be made by the necessities you intend to put on
it. Be that as it may, an AC switch is many circumstances speedier than the 802.11n form that went
before it. The AC switch additionally handles different gadgets superior to anything the more
established switch models. Numerous homes have PCs, tablets, telephones, keen TVs, gushing
boxes and savvy home gadgets that all utilization a remote association with the switch. The remote
switch for the most part interfaces specifically to the modem provided by your fast network access
supplier by wire, and everything else in the home associates remotely to the switch.
Like switches, get to indicates permit remote systems join a current wired system. This
circumstance happens in an office or home that as of now has wired switches and gear introduced.
In home systems administration, a solitary access point or switch has adequate range to traverse
most private structures. Organizations in office structures regularly should convey numerous
entrance focuses and additionally switches.
Remote Antennas
Access focuses and switches can utilize a Wi-Fi remote reception apparatus to altogether
build the correspondence scope of the remote radio flag. These recieving wires are worked in on
most switches, however they are discretionary and removable on some more established hardware.
It's conceivable to mount reseller's exchange add-on recieving wires on remote customers to build

SECURE WIRELESS DESIGN FOR RARE VINTAGE AUTO PARTS LTD 5
the scope of remote connectors. Additional items radio wires are generally not required for average
remote home systems, despite the fact that it's normal practice for wardrivers to utilize them.
Wardriving is the act of intentionally scanning a neighborhood for accessible Wi-Fi remote system
signals.
Remote Repeaters
A remote repeater interfaces with a switch or access point to expand the span of the system.
Frequently called flag promoter or range expander, a repeater fills in as a two-way hand-off station
for remote radio signs, to permit hardware generally unfit to get a system's remote flag to join.
Remote repeaters are utilized as a part of expansive homes when at least one rooms doesn't get a
solid Wi-Fi flag, normally as a result of their separation from the remote switch.
Detailed Plan or Implementing a Wireless 802.11 and mobile Interconnection Solution
Wireless LAN (WLAN) innovation has developed and turned into a commonsense other
option to customary systems. It offers the sort of anyplace/whenever availability that the present
profoundly portable workforce has generally expected. Remote LANs can give full access to
organize assets from wherever inside scope of an Access Point (AP).On one level, a remote LAN is
especially similar to a wired LAN. There are endpoint gadgets (servers, workstations, printers)
empowered by arrange cards and information is exchanged with organize correspondence
conventions. Rather than going on fiber or copper, information is exchanged with Radio Frequency
(RF) signals. Remote LANs make it simpler for workers to remain on line and in touch. The
expanded adaptability of Wireless LANs empowers more profitable work groups, underpins more
prominent worker joint effort and adds to representative fulfillment. Laborers like the portability
and feeling of strengthening that a WLAN can give. Since it has turned into a prominent innovation
utilized inside a residence,many organizations know about the nuts and bolts of remote systems
administration. The simplicity of setting up a WLAN is adding to its fast reception.
Notwithstanding, an effective WLAN usage requires a similar sort of cutting edge nitty gritty
arranging and tender loving care as some other system sending.
Systems administration Requirements
Examination and Deployment Considerations
The initial phase in a WLAN execution is to lead an intensive business investigation to
check that remote innovation will address business issues and convey the required usefulness. The
physical environment(indoors, outside or both), the sort of activity the WLAN should convey

SECURE WIRELESS DESIGN FOR RARE VINTAGE AUTO PARTS LTD 6
(information, voice, video or the greater part of the above) and the kind of business work it is
proposed to serve, (for example, conferencing, client administration or deals bolster) ought to be
considered. It is additionally critical to factor in future application necessities, development and
versatility as a major aspect of the underlying appraisal. Channelization and arrangement measures
assume an imperative part in WLAN usage. A channel speaks to a limited band of radio recurrence.
Since radio recurrence tweaks inside a band of frequencies, there is a constrained measure of
transfer speed inside any offered range to convey information, which impacts the general limit of
the WLAN. It is critical that the frequencies don't cover or the throughput would be altogether
brought down as the system sorts and reassembles the information parcels sent over the air. There
are a couple of essential arrangement models from which to pick, with all the more being tried. Four
contemplations will be examined in this paper, including 802.11b,
802.11g, 802.11a and 802.11i. Information rates up to 6 Mbps of successful (throughput
utilized for information exchange versus overhead) can be upheld with a 802.11b sending. This
choice is regularly picked if there are few clients for each AP, if WLAN get to is required for
handheld PCs or if a current 802.11b WLAN should be extended to suit more activity.
802.11b penetrates dividers and give great indoor range. To forestall obstruction with other
hardware, the physical condition ought to be free of different remote gadgets, for example, cordless
telephones, microwaves or lifts using the same 2.4 GHz recurrence. Since it can give successful
throughput up to 25 – 30 Mbps, 802.11g might be a decent choice for organizations requiring more
throughput. Organizations utilizing a current 801.11b system can move up to 802.11g since they
both work on the 2.4 GHz recurrence. Applications requiring high transfer speed and speed, for
example, substantial illustrations, sound, information and video records, are regularly utilized with
this choice. Like 802.11b, 802.11g enters dividers, offers great indoor range and may encounter
obstruction from different gadgets on a similar recurrence. Another arrangement choice that offers
upgraded throughput to help applications requiring high transmission capacity is 802.11a. This
choice gives bring down obstruction different gadgets than 802.11b, however regularly has a
somewhat shorter indoor and open air extend than 802.11b and 802.11g. 802.11a works on a 5 GHz
band, which is an alternate and more extensive recurrence range than 802.11b and 802.11g,
permitting more channels and more general throughput. The more extensive recurrence band
enables 802.11a to help up to eight non-covering channels. 802.11b and 802.11g help up to three
non-covering channels. Recurrence ranges and channels may change by nation.

SECURE WIRELESS DESIGN FOR RARE VINTAGE AUTO PARTS LTD 7
The quantity of radio recurrence channels required by an association is controlled by
surveying utilization prerequisites. For instance, an open hotspot, for example, an entryway can as a
rule be all around bolstered by the 802.11b standard for email support or survey sites. A gathering
room might be ideally serviced by the 802.11a standard for exchange and shared work with
information records. A home office may be most appropriate by a 802.11g-based system to
encourage empower great application execution for virtual office specialists. The quantity of
synchronous clients that an AP can bolster depends for the most part on the measure of information
movement going at once (substantial versus light downloads and transfers). Data transmission is
shared among clients on a WLAN as with wired system associations. System execution, as checked
by the quantity of concurrent clients, relies on the joined figuring action. For instance, with
802.11b, every equipment get to point has up to 6 Mbps successful throughput. This limit is
satisfactory for:
• 15 – 25 ostensible clients who are for the most part sit and beware of intermittent content based
email
• 10 – 15 standard clients who much of the time utilize email and download and transfer respectably
measured documents
• 5 – 10 control clients who are continually on the system and manage extensive documents
To build limit, more APs might be included, which gives clients greater chance to enter the
system. Systems are enhanced when the APs are set to various channels. A more up to date standard
that has been produced addresses security shortcomings with respect to both verification and
encryption conventions. This determination, 802.11i, includes 802.1X, Temporal Key Integrity
Protocol (TKIP) and Advanced Encryption Standard (AES) conventions.
The Site Survey
With the prerequisites and organization affirmed, it's the ideal opportunity for a site
overview. The best overviews are done actually on location. Displaying instruments can mimic a
situation without a real visit, however they are just in the same class as the source information. Key
components to be resolved in this review are distinguishing the number and position of APs and
evaluating the constriction of radio recurrence obstructions. The speed at which a WLAN performs
relies upon numerous things, for example, the productivity of the wired system, the design of the
building, and the kind of WLAN utilized. When in doubt for all WLANs, information throughput
diminishes as the separation between the WLAN get to point and the remote customer increments.
An evaluation of AP flag quality utilizing different recieving wire and AP arrangements decides the

SECURE WIRELESS DESIGN FOR RARE VINTAGE AUTO PARTS LTD 8
number and situation of required APs expected to give satisfactory radio scope. This procedure
includes:
• Gathering office illustrations and outlines, reporting wiring, for example, the area of host
frameworks and recording electrical plugs and auxiliary components, (for example, metal firebreaks
and dividers, entryways and ways).
• Assessing ecological radio scope including the choice of AP gadgets and radio for the
establishment zones where flag impedance is kept away from or limited. The ideal situating of
get to focuses and reception apparatuses is additionally decided.
• Assessing channel impedance and directing testing to help guarantee radio transmissions don't
cover.
• Choosing radio wire arrangement including situating of omni-directional and directional recieving
wire.
• Establish decent variety gathering including conquering obstruction or blurring by situating
numerous recieving wires in specific areas.
• Assessing electrical frameworks including audit of AP electrical establishment other options to
avoid execution debasement on intrinsic or irregular electrical issues.
• Redundancy ought to be considered for gathering rooms, cafeterias and other multiuse spaces to
help guarantee great throughput.
Weakening of radio recurrence impediments ought to likewise be considered as a component
of the site overview and evaluation. Both the capacity of radio waves to transmit and get data and
the speed of transmission are affected by the idea of any impediments in the flag way. The
delineation on page 2 demonstrates the relative level of lessening for basic impediments.
Security Considerations
Security is regularly refered to as a key worry in a WLAN usage, as it can be a potential
open way to the system. Before arrangement, the WLAN's security issues ought to be illuminated
expressing plainly what sort of validation measures and encryption strategies will be utilized.
Creating and recording a WLAN security strategy is a decent initial step. Numerous security
ruptures can be followed to arrangement disappointments, not innovation disappointments. WLAN
security arrangements ought to be like some other system security approach, with an expressed
reason, an unmistakable degree and doled out obligations. One approach to make a WLAN more
secure is to restrict its scope. At the outline organize, the WLAN's architects ought to be clear about
how far and wide remote access is extremely required, so they can choose APs that will shape the

SECURE WIRELESS DESIGN FOR RARE VINTAGE AUTO PARTS LTD 9
flag's range and bearing. It's additionally a smart thought to disengage the WLAN from whatever
remains of the system with an inside firewall or Wireless DMZ. A few security innovations can give
added levels of insurance to WLANs:
• Service Set Identifier (SSID) recognizes the WLAN. Customers must be designed with the right
SSID to get to their WLAN. The SSID ought not be communicated and the key ought to be
imparted just to those having genuine need to get to the system. At long last, the SSID ought to be
changed intermittently.
• Media Access Control (MAC) is get to in view of a separating arrangement of Security
Considerations
Security is regularly refered to as a key worry in a WLAN execution, as it can be a potential
open way to the system. Before arrangement, the WLAN's security issues ought to be elucidated
expressing obviously what sort of validation measures and encryption strategies will be utilized.
Creating and recording a WLAN security strategy is a decent initial step. Numerous security breaks
can be followed to strategy disappointments, not innovation disappointments. WLAN security
arrangements ought to be like some other system security strategy, with an expressed reason, an
unmistakable extension and doled out duties. One approach to make a WLAN more secure is to
restrict its range. At the outline organize, the WLAN's designers ought to be clear about how far and
wide remote access is extremely required, so they can choose APs that will shape the flag's range
and heading. It's additionally a smart thought to detach the WLAN from whatever is left of the
system with an inward firewall or Wireless DMZ. A few security innovations can give added levels
of assurance to WLANs:
• Service Set Identifier (SSID) recognizes the WLAN. Customers must be arranged with the right
SSID to get to their WLAN. The SSID ought not be communicated and the key ought to be
imparted just to those having honest to goodness need to get to the system. At last, the SSID ought
to be changed occasionally.
• Media Access Control (MAC) is get to in view of a sifting arrangement of MAC tends to designed
for a particular LAN exchanged port. It confines WLAN access to PCs that are on a rundown made
for each AP on the WLAN arrange. It additionally limits the association of APs and the LAN switch
port.
• Wired Equivalent Privacy (WEP) is an encryption strategy that ensures WLAN information
streams amongst customers and APs as determined by the 802.11 standard. There have been
imperfections recognized in this security instrument and its adequacy is unverifiable.

SECURE WIRELESS DESIGN FOR RARE VINTAGE AUTO PARTS LTD 10
• IEEE 802.1X is a security standard including a port-based confirmation system and dynamic
conveyance of session keys for WEP encryption. A range server is required. • IEEE 802.11i is an up
and coming security strategy being created by the IEEE that highlights 802.1X confirmation and
incorporates Advanced Encryption Standard (AES) for included insurance. Another improvement,
Temporal Key Integrity Protocol (TKIP), permits encryption keys to be changed as often as
possible.
• Wi-Fi Protected Access (WPA) is a strategy that tends to the encryption issues of WEP by using
Temporal Key Integrity Protocol, which wraps around WEP and changes the encryption key every
now and again. WPA likewise incorporates the confirmation advantages of 802.1X.
• Extensible Authentication Protocol (EAP) is a point-to-point convention that backings numerous
verification strategies. The help of EAP writes relies on merchant execution. EAP gives the system
to the customer, the authenticator (the remote access gadget or access point) and the verification
server to confirm each other and impart the encryption keys.
Macintosh tends to arranged for a particular LAN exchanged port. It confines WLAN access
to PCs that are on a rundown made for each AP on the WLAN arrange. It additionally limits the
association of APs and the LAN switch port.
• Wired Equivalent Privacy (WEP) is an encryption technique that secures WLAN information
streams amongst customers and APs as determined by the 802.11 standard. There have been
blemishes distinguished in this security system and its viability is indeterminate.
• IEEE 802.1X is a security standard including a port-based verification system and dynamic
conveyance of session keys for WEP encryption. A range server is required.
• IEEE 802.11i is an up and coming security technique being produced by the IEEE that highlights
802.1X verification and incorporates Advanced Encryption Standard (AES) for included insurance.
Another upgrade, Temporal Key Integrity Protocol (TKIP), permits encryption keys to be changed
every now and again.
• Wi-Fi Protected Access (WPA) is a strategy that tends to the encryption issues of WEP by using
Temporal Key Integrity Protocol, which wraps around WEP and changes the encryption key much
of the time. WPA likewise incorporates the verification advantages of 802.1X.
• Extensible Authentication Protocol (EAP) is a point-to-point convention that backings various
verification techniques. The help of EAP composes relies on seller usage. EAP gives the structure to
the customer, the authenticator (the remote access gadget or access point) and the confirmation
server to verify each other and impart the encryption keys.

SECURE WIRELESS DESIGN FOR RARE VINTAGE AUTO PARTS LTD 11
Risk Analysis
Isolate inside clients from visitor clients
Unless your visitor clients totally expect access to inside assets, ensure you put them on a
totally isolate visitor WiFi organize. The majority of the present current undertaking WiFi models
offer a simple method to securely locally available visitor clients and isolate them so they just
approach the Internet, not interior assets.
WPA2
Wi-Fi Protected Access 2 - normally alluded to as WPA2 - is a security convention that fuses
the majority of the important security components found in the 802.11i IEEE security detail. There
are two distinct sorts of WPA2. The first (WPA2 Personal) utilizes a standard pre-shared key and
the second (WPA2 Enterprise) uses 802.1x validation. In the event that conceivable, utilize WPA2
Enterprise at whatever point conceivable since it requires each to confirm utilizing his or her own
particular extraordinary username/secret key.
Physically secure your APs
Since a remote LAN must be sent in a disseminated way, you wind up with remote access
focuses in storage rooms and roof all through a building. Do your best to physical secure the APs to
forestall against burglary or altering. Most endeavor class APs enable you to mount and afterward
secure the gadget. Likewise ensure that any neighborhood access to the WAP requires a one of a
kind secret word.
Utmost WiFi flag
With regards to WiFi flag quality, more isn't generally better. From a security stance, your
objective ought to be to give adequate WiFi flag just to the regions where it's required. In the event
that you have WiFi flag that scopes past building dividers and out into open spaces, you chance
welcoming individuals who may endeavor to break into the system or meddle with the remote flag.
Rogue AP location
A rebel remote access point is an unapproved AP that has been introduced on a safe system.
Maverick APs represent a genuine security danger and it's vital that you have the correct
instruments set up to effectively screen the WLAN and expel the gadgets from your system.
Remote interruption counteractive action frameworks
Propelled endeavor remote security can include a devoted remote IPS. These gadgets screen
and distinguish more focused on and odious WLAN assaults that utilization methods, for example,
AP satirizing, malevolent communicates, and parcel surges.

SECURE WIRELESS DESIGN FOR RARE VINTAGE AUTO PARTS LTD 12
Cell phone administration
MDM isn't just about having the capacity to better oversee BYOD gadgets; there's a security
component required also. With most MDM arrangements, you can isolate gadgets that don't meet
set security guidelines, restrict application establishments, and actualize information misfortune
avoidance (DLP) through methods, for example, geofencing.
Bolster inheritance WiFi gadgets
At last, we should consider the genuine plausibility that we should oversee heritage WiFi
gadgets that don't have the capacities with a specific end goal to meet our best practice execution
measures. Remote printers and WiFi-fit handheld scanners are famous for staying around for quite a
long time in the endeavor. In circumstances were gadgets don't be able to utilize the most secure
type of WiFi verification and encryption, it's best to section these gadgets onto their own different
virtual system with their own particular extraordinary SSID.