Fragment and Forge: Breaking Wi-Fi Through Frame Aggregation and Fragmentation

Thu 10Jun2021

Mathy Vanhoef, New York University Abu Dhabi

From 12:30 until 13:30

At Zoom: https://ethz.zoom.us/j/66371325367

https://ethz.zoom.us/j/66371325367

Abstract:

This presentation covers the "FragAttacks" research. This research includes three new design flaws in the 802.11 standard that underpins Wi-Fi. One design flaw is in the frame aggregation functionality, and another two are in the frame fragmentation functionality. These design flaws enable an adversary to forge encrypted frames in various ways, which in turn enables exfiltration of sensitive data. The presentation will also discuss common implementation flaws related to aggregation and fragmentation. The attacks affect all protected Wi-Fi networks, ranging from WEP all the way to WPA3, meaning the discovered flaws have been part of Wi-Fi since its release in 1997. The talk ends with a discussion of how these flaws went unnoticed for so long and lessons we can learn from their discovery.

Join the Zoom meeting at 12:30 on Thursday, June 10th: https://ethz.zoom.us/j/66371325367

Download Event to Calendar