Reference no: EM133571202
Assignment
You are hired by an organization to analyze packet captures from a wireless network. You are looking to assess if the captures pose a threat.
Analyze the packet captures provided by Wireshark by doing the following:
Visit the Gitlab SampleCaptures webpage to download the following:
1. wpa-Induction.pcap.gz Wi-Fi 802.11 WPA traffic
2. wpa-eap-tls.pcap.gz WiFi 802.11 WPA-EAP/Rekey sample
3. nb6-hotspot.pcap Someone connecting to SFR's wireless community network
4. ciscowl.pcap.gz (libpcap) Cisco Wireless LAN Context Control Protocol (WLCCP) version 0x0
5. wap_google.pcap contains two WSP request-response dialogs
Note: Only download these sample captures. Other captures may set off your computer's system defenses.
Use Wireshark to view and analyze the sample captures.
Create a 1 to 2 pages table that ranks the packet captures from the highest to lowest threat. In your table, provide the following for each packet capture:
1. Description of the traffic
2. Description of the risks, if any, the traffic poses to the wireless network
3. Countermeasures to take to secure the network from any threat
Write a 2 to 3 pages memo to management as a network security specialist, and ensure you do the following:
Question 1. Explain how to distinguish hostile packet data from normal packet data.
Question 2. Explain how to recognize any attack signatures in the packets you analyze.
Question 3. Provide a rationale for ranking the packets as you did.