Organizer
Partner Company
Exploiting WPA3 Networks: New Vulnerabilities and Defenses
Mathy Vanhoef
Abstract
In the last few years, we've seen major advancements in Wi-Fi security. Most notably, on the defense side we have had the release of WPA3, and on the attack side we've seen vulnerabilities such as KRACK and more recently FragAttacks. How does this change how we should test the security of Wi-Fi networks? And how do we securely configure Wi-Fi networks nowadays?
To answer these questions, this presentation starts by giving an overview of recent Wi-Fi vulnerabilities. This includes a recap of the KRACK and FragAttacks vulnerabilities as well as other notable implementation vulnerabilities. While doing so, two new Wi-Fi vulnerabilities in the OnePlus 6 smartphone will be released.
The second part of the presentation discusses two new defenses that can mitigate future Wi-Fi vulnerabilities: beacon protection and operating channel validation. These defenses are part of the latest Wi-Fi standard and you can think of them as the stack canaries of Wi-Fi. I will discuss the advantages and limitations of both defenses, how you can test whether they are enabled, and how to configure them on Linux.
Speaker Info
Mathy Vanhoef is a professor at KU Leuven University in Belgium. He previously presented at Black Hat, DEF CON, CCC, and other conferences worldwide. Most notably, he discovered the KRACK attack against WPA2 and the Dragonblood attack against WPA3. He's interested in computer security with a focus on network and wireless security, software security, and applied cryptography. In these areas, Mathy tries to bridge the gap between specifications and real-world code.