DoS on WEP and VOIP

1
DoS on WEP and VOIP

• By
• Mark Lukowski

2
WEPs Lack of Security

• WEP uses a stream cipher.
• The sender XORs the key stream with the plaintext
  to produce ciphertext.
• The receiver has a copy of the same key, and uses
  it to generate identical key stream. XORing the
  key stream with the ciphertext yields the
  original plaintext.
• Programs available to make attack quick

3
WEP DoS

• Attacker can
• Download illegal material
• Use network for attacks
• Use up bandwidth
• Owner of Access Point is held responsible

4
Solutions?

• Enable MAC Filtering
• Frequent Password changes
• Change to WPA

5
VOIP DoS

• Send a /StreamingStatistics script with a stream
  ID over 32768
• Attack will reset phone, disabling it for 30
  seconds
• Repeating stream would make communications
  impossible

6
Solutions

• Apply updates to avoid new attacks
• Disable unnecessary protocols