Apply Blockchain to Overcome Wi-Fi Vulnerabilities

Wi-Fi is a technology that allows electronic devices to connect to a wireless LAN (WLAN), mainly using the 2.4 gigahertz (12-centimeter) UHF and 5 gigahertz (6-centimeter) SHF ISM radio bands. Although wireless LANs are generally password protected, they are also open to any device located within the band to access the resources of the wireless LAN network. Wi-Fi Alliance defines Wi-Fi as any "WLAN" product based on the Electronic Engineers Association (IEEE) 802.11 standards.Wi-Fi is one of the trademarks of Wi-Fi Alliance [7-9].

The Wi-Fi Certified trademark is only available for Wi-Fi products that are fully qualified for Wi-Fi Alliance interoperability certification tests. Devices using Wi-Fi technology include personal computers, video game consoles, smartphones, digital cameras, tablet computers, digital audio players and modern printers. Wi-Fi-compatible devices can access the Internet through WLAN networks and wireless access points. These access points (hotspots) have a band of approximately 20 meters (66 feet) indoors and larger outdoors. The hotspot support range can be supported only by small rooms with walls that block radio waves, and can be extended to several square kilometers by overlapping access points.

Wi-Fi is less secure than wired connections such as Ethernet because intruders do not need to make physical connections. Web pages using TLS are secure, but unencrypted Internet access can be easily found by intruders. For this reason, Wi-Fi is adopting a variety of encryption technologies. The initial encryption WEP could be easily penetrated. Higher quality protocols (WPA, WPA2) were later added. The optional feature added in 2007 - Wi-Fi protection setup (WPS) - had serious flaws that enabled an attacker to identify the router's password. Since then, Wi-Fi Alliance has updated its test plan and certification programs to ensure that newly certified devices can resist attacks [10-14].

Fig. 1. Architecture for Wi-Fi.

Download Original Figure

Blockchain is a technology that ensures integrity and reliability without authorized third parties by jointly verifying, recording, and storing transaction information by all participants in the network. Based on Distributed Ledger technology, it features a ledger that holds all transactional information that occurs in peer-to-peer networks (P2P) networks, all nodes store and update, and maintain the integrity of the data. Because of this, Goldman Sachs also defines blockchain as a "shared and distributed transaction database designed to increase transparency, security and efficiency of transactions." Although the definition of blockchain varies slightly from institution to institution, most of the features have something in common. In other words, it has something in common in that it enabled the implementation of various application services based on a distributed network infrastructure utilizing security technologies such as hash, electronic signature and encryption. In addition, blocks stored on each node include information from the previous block (hash values), current transaction information, and hash values, which are difficult to manipulate and enable transparent management of transaction information [15-19]. It presents characteristics (center) of blockchain technology at the PWC and what can be improved by doing so (correcting the problems on the left as shown on the right). Based on encryption, blockchain can "see the scope of its services that are programmable (or programmable) such as Smart Contracts while aiming (or supporting) for Immutable, Transparent, Distant, and Consensus." Due to the possibility that it can be "expanded," there are expectations for various industrial applications. Looking at this around tasks that are being applied with blockchain, one can see more clear characteristics. In another report, McKinsey identified blockchain utilization as "Record Keeping" and "Transaction." Record keeping is also based on the integrity of the blockchain. As a static storage area, information such as reference day sites (real estate registration, patents) or identity information (citizenship, voting rights) and smart contracts are recorded. While smart-system drugs may contain a variety of content, once defined contracts do not change frequently. On the other hand, transaction related data are viewed [11]. If record keeping focuses on safe storage, the transaction is considered relatively dynamic and a registry for managing the change. This addresses the ongoing updates to the books, such as asset exchanges and payments. Blockchain-based payment services such as bitcoin are available because the blocks that are created are still connected and traceable to the transaction details. Therefore, this application may also be used to assist in activities such as improving the status of changes in ownership or visibility of the supply chain. summarizes major blockchain services by industry/task based on two basic functions presented by McKinsey [20-22].

Fig. 2. Advantage of Blockchain

Download Original Figure

The Harvard Business Review suggested that blockchain has the potential to create a new foundation for economic and social institutions as a Foundational technology, just like TCP/IP did in the past. The underlying technology needs a little more time before it has a clear effect, but its ripple effect is relatively large. The most devastating advantage that blockchain can provide is that it can replace the role of existing third-party trust organizations through the formation of technology-based trust. This requires not only blockchain technology, but also overall changes from the role of business ecosystem members and the way they work. It can be expected that it will be a base technology that supports digital switching society along with issues such as spreading IoT and digitizing assets, growth of big data industries that are linked to personal identification rights and GDPR, cloud-based SW services, and AI [23-25]. Therefore, more time may be needed for the visible effect. In a report released in 2015, the WEF saw the full-fledged ignition point of blockchain Surveyor (Tippoint) as the time when the value of 10 percent of global GDP was stored on blockchain platforms. Based on the timing of the report's announcement, the report is expected to be around 2025, about 10 years later. As to when blockchain will be activated, Gartner offers a similar opinion. Blockchain is passing through a "Through of Disposal" for technology, which means that time and support are needed for large-scale spread and commercial success cases [12]. Together, the Katner Heif cycle and Geoffrey Moore's Kasms curve confirm that it is time for the blockchain to reduce the gap to enter the mainstream market. And that period is viewed by most agencies as around the next five to 10 years. In times when excessive expectations about technology are removed, however, early products are known to fail, leading to a sudden drop in market interest or a shift away from public attention. Deloitte also announced at Githeub (github.com) that only about 6 percent of the 86,000 blockchain projects under way could last. Therefore, a business model that can bring about gradual changes is also needed to minimize the space of the casserole and quickly access the liquor market. This can lead to a process of securing a variety of use cases and embedding technologies that can be applied in real business environments. Through such a technology re-lighting system, the system continues to stabilize, and if the entire blockchain ecosystem-scale economy is achieved, innovative services can also develop to the level of commercialization. Blockchain is not merely an improvement in the process, but it is considered to be a disruptive technology as soon as its potential is maximized. To this end, the market should be created along with innovative services and gradual models. In fact, blockchain is an infrastructure technology that is used to improve business processes through a sustainable business model, along with a disruptive business model. If disruptive and innovative changes can give startups new opportunities, gradual process improvements can help existing firms continue their competitive advantage.

MIT Sloan School has presented a business model that utilizes blockchain in the media industry with a disruptive form, as well as a sustainable model. A disruptive model is a service model that can pose a potential threat to existing businesses. The first may take the form of a "Stemit" that "provides revenue to both creators and managers." Stimit's creator can be rewarded for writing in itself, and curators who work on sites and make recommendations for good articles will also be rewarded. If existing blogging services relied on advertising revenue from power bloggers, they could be differentiated in that they could focus more on the content itself. The second form of a disruptive model, "One-Stop Content Shop," can also be seen as a business model that can change the distribution process of existing digital content. Wojo Music (https://ujomusic.com) is an example of an artist's goal of securing profitability. For songwriters or performers, the profit ratio can be adjusted through smart contracts and the profit structure can be improved by selling songs directly to end consumers. If the disruptive model could have been an opportunity for new companies to grow, the "Sustaining" model can be used to strengthen the competitiveness of existing companies or target niche markets. The first example is to improve the content distribution process and provide revenue through copyright with the aim of "protecting IP" the creator. Kodak once introduced a service called Kodak One based on blockchain. Here, it tracks the use of images registered with AI-based Web crawling and image recognition technology and protects the rights of photographers to return copyright fees by detecting illegal use. Kodak announced that it has made $1 million worth of revenue from revenue from copyright rates since 2018. The second "digitalization of the value chain" is aimed at optimizing the value chain to proceed the revenue distribution process more quickly and accurately. This model is similar to Uzzo Music, but it can be seen as a model that is being offered to participants in the value chain of the existing music industry. Sportipay said it will take over blockchain technology firm Media Chain Lab in 2017 and introduce blockchain in resolving issues such as copyright management and royalty payments. The third is a case in which ownership of a particular game item in the form of "transaction of game assets" can be utilized without being limited to that game. By doing so, it can improve the utilization of digital assets through cryptocurrency such as Kryptonite and Game item transactions.

Fig. 3. Tetradian Consulting (Tom Graves Linkedin page).

Download Original Figure

Wi-Fi eavesdropping is a type of intermediate-person attack in which hackers use public Wi-Fi to monitor the activities of connected people. Interception information ranges from personal information to Internet traffic and search patterns.

Generally, eavesdropping begins by creating a fake Wi-Fi network with a legally-appearing name. Fake hotspots are often very similar to the names of nearby stores and companies. It is also known as Evil Twin. For example, when a consumer enters a cafe, they see three Wi-Fi with a similar name. Café, Cafe 1 and Cafe 2 One of the three Wi-Fi options is likely to be the con artist's Wi-Fi. Hackers can use the technology to collect data from any device that establishes an Internet connection, eventually stealing login credentials, credit card information and other important data. Wifi eavesdropping is just one of the risks associated with public networks, so we recommend you not use it. If you really need to use a public Wi-Fi, make sure you check with the staff to see if it's real and safe.

Sometimes criminals use certain computer programs to steal data. These programs are known as packet sniffer, and are often used by legitimate IT professionals to record digital network traffic, making it easier to detect and analyze problems. However, many of these packet analysts are abused by cybercriminals who want to collect sensitive data and engage in illegal activities. Even if nothing bad happened at first, the victims would later notice that someone had committed identity fraud against them or that the company's confidential information had somehow been leaked.

In wireless Wi-Fi, cookies are small data packets that web browsers collect from websites as a way to keep some search information. These data packets are usually stored locally on the user's computer so that the website recognizes the user when he or she returns. Cookies are useful because they make it easy to communicate between users and the websites they visit. For example, cookies allow users to log in without entering their credentials whenever they visit a particular webpage. Online stores use cookies to record items customers have previously added to their shopping carts or to manage their search activities. Cookies are simple text files, so they won't harm your computer because keys or malware won't fit in. However, cookies are dangerous in terms of privacy and are often used for intermediate-term attacks.

If a malicious person can steal a cookie that he or she is using to communicate with you on the website, you can use that information against you. This is called cookie theft and is often associated with session hijacking. Successful session hijacking allows an attacker to disguise himself as a victim and communicate with the website instead. This means attackers can use the victim's current session to access personal e-mails or other websites that may contain sensitive data. Session hijacking generally occurs in public Wi-Fi hotspots because they are easy to monitor and much more vulnerable to intermediate-magnetic attacks.