1.1 Introduction
Threats to wireless local area networks (WLANs) are numerous and potentially devastating. Security issues ranging from mis-configured wireless access points (WAPs) to session hijacking to Denial of Service (DoS) can plague a WLAN. Wireless networks are not only susceptible to TCP / IP-based attacks native to wired networks, they are also subject to a wide array of 802.11-specific threats.
To aid in the defense and detection of these potential threats, WLANs should employ a security solution that includes an intrusion detection system (IDS). Even organizations without a WLAN are at risk of wireless threats and should consider an IDS solution. This paper will describe the need for wireless intrusion detection, provide an explanation of wireless intrusion detection systems, and identify the benefits and drawbacks of a wireless intrusion detection solution.
As a prelude to other parts of this study, this chapter will discuss the background upon which this study was initiated, the statement of problems that led to this study, the Aim and Objectives of the study. Others are Significance of the study, Scope of work, Limitation of the study and Definition of technical terms.
1.2 Background of Study
Federal Polytechnic Nekede Owerri Internet Service Provider is chosen as the background of study for the project. Among the great organization and big institution is Federal Polytechnic Nekede Owerri, a tertiary institution with several employees working in the different department to achieve the set out objective of educating the human person. By edict No. 16 of 1978, the college of Technology, Owerri was established.
It opened for classes on 15th December, 1978 at a temporary site in the premises of the government trade centre, along Egbu Road Owerri, with an initial in-take of 275 students. In October, 1980, the college moved to its permanent site at Nekede near Owerri, by which time the college had grown to 1,350. The name of the college was later changed to the Polytechnic, Nekede, Owerri by Federal Amendment of Decree 1993 of 1st January, 1993.
The Federal polytechnic is at present organized into the schools of:
- Business Administration and Management Technology which offers courses such as Accountancy, Public Administration, Banking/Finance etc.
- Engineering Technology which offers courses such as Mechanical engineering, Civil engineering, Computer science etc.
- Environmental design which offers courses like building technology, architectural etc.
- Industrial sciences which offers courses like science technology, food technology etc.
- General studies which offers courses like Mathematics, Statistics, humanities etc.
Each of the above mentioned schools is headed by a Dean and all the schools have department also headed by a HOD (head of department). The non-academic divisions and units’ include the registry, bursary, works, medical and health services and the student's affairs. The units are:
Security, internal audit and public relations which are however, housed under the office of the rectory.
1.3 Statement of Problem
There are difficulties experienced in the manual system or intrusion detection in an organization. These factors therefore necessitate the implementation of a computer base system in other to overcome the short comings of the manual system of detecting intrusion. By automating the system, rate of intrudes flow will be eliminated in an organization, equally the statement of the problem of the work is also be:
- To understand what intrude is all about and solutions to stop it in entirely.
- To make an effective security on all the functional inputs of the organization.
- To bring a seasonal programmer and an operator who will be taking charge of the intrusion detector software being developed.
1.4 Aim and Objectives of the Study
The aim of the study is to design and implement an Intrusion Detector Software for Wireless ISPS using Federal Polytechnic Nekede Owerri ISPS as a case study. In achieving this aim, the following specific objectives were laid out as follows:
- To aid in monitoring and controlling of fraudulent.
- To provide quick enquiry about information in an organization.
Furthermore, the study will show the effect in the manpower of the security department because on most occasions charging the manual information system to an automated information system will equally cause redundancy.
1.5 Purpose of the Study
The primary purpose of a WISP is to prevent unauthorized network access to local area networks and other information assets by wireless devices. These systems are typically implemented as an overlay to an existing Wireless LAN infrastructure, although they may be deployed standalone to enforce no-wireless policies within an organization. Some advanced wireless infrastructure has integrated WISP capabilities.
Large organizations with many employees are particularly vulnerable to security breaches (Pcworld, 2008) caused by rogue access points. If an employee (trusted entity) in a location brings in an easily available wireless router, the entire network can be exposed to anyone within range of the signals.
In July 2009, the PCI Security Standards Council published wireless guidelines (Pcisecuritystandards, 2009) for PCI DSS recommending the use of WISP to automate wireless scanning for large organizations.
1.6 Significance of Study
The Intrusion Detector Software for wireless ISPs would lead to an effective and comprehensive intrusion control in an organization; for examples, computerized verification of illegal access of customers e-mail, computerized verification of signatures. In a matter of seconds the computer system enhanced to do all these tasks, then all criminal and inrusion minded people will desist from such acts.
The documentation of the proposed system will be of immense benefit to other researchers who intend to know more on this study and can also be used by non-researchers to build more on their research work. This study contributes to knowledge and could serve as a guide for other study.
1.7 Scope of Study
The scope of the research is focused on the Design and Implementation of an Intrusion Detector Software for Wireless ISPS using Federal Polytechnic Nekede Owerri ISPS as a case study.
1.8 Limitations of the Study
During the course of this study, many things militated against its completion, some of which are:
- Time Constraint: The time frame given to accomplish this project was very short due to school academic calendar and it was carried out under pressure which made the researcher not to implement some necessary features.
- Establishment Policies: Establishment policies posed a serious limitation as most staffs are not ready to release information needed for this research work. There were lots of information needed from the staffs of this institution to enhance the study which took them time to release or they did not release at all for security purposes, hence the scope was reduced.
- Financial Constraint: Insufficient fund tends to impede the efficiency of the researcher in sourcing for the relevant materials, literature or information and in the process of data collection (internet).
1.9 Definition of Terms
Intrusion:
Is defined as deception deliberately practiced with a view of gaining an unlawful or unfair advantage.
Economic Crime:
This is the manifestation of criminal act done either solely or in an organized manner with or without associates or group with the propose earning wealth or being rich through all illegal means.
Identity Theft:
This is an action that proceeds enable a intrusion to occur.
False Billing Fraud:
This occurs when a business or an individual receives a bill for a product whereby the representation of the product by the promoter was either false or misleading or whereby the product were either never ordered or received.
Internet Intrusion / Fraud:
This refers generally to any type of fraud scheme that uses one or more components of the internet such as chat room, e-mail, message boards or websites to present fraudulent transactions or to transmit the proceed of fraud into in financial institutions or to others connected with the scheme.
Password:
This is a measure of protection against intruders from gaining access to the documents and secretes information.
System Investigation:
This is an in-depth and study of an existing system with regard to its producers in working out an improved system.
Research Methodology:
This is an investigation undertaking in order to discover new factors through planning and systematic collection, analysis and interpretation of data. -Direct Personal Observation:
Involves the means of watching people, events and obtaining a lot of first hand information relating to the people concerned.
Personal Interview:
This is a means of which information needed are source directly, by interviewing people who are going to use the system.
