Li Fi- A new Technology for internet connection

Li Fi- A new Technology for internet connection

Li fi – a new revolutionary  technology in wireless communication. Nowadays scientists research on the fast data transfer technologies, they develop a new way for data transfer through which we can transfer data upto250 times more than any existing technology.

Telling something!!

 Li fi uses the light as the medium while Wi Fi uses the radio frequencies. Li Fi is more secure than Wi Fi because the light waves used cannot penetrate the walls. It can be used in electromagnetic sensitive areas without causing interference like in aircraft or nuclear plants.

During the TED talk in 2011, Edinburgh University's Prof Harald Haas coined the term Li-Fi which is also known as VLC(visible light communication).  A joint research between the universities of Oxford, Cambridge, Edinburgh, St Andrews and  Strathclyde, carried out the research in this field under the Ultra Parallel Visible Light Communications project ,funded by Engineering and Physical Sciences Research Council. Using the single microchip existing LED light bulbs could be converted into Li Fi signals. In situations where radio frequencies cannot use due to the fear of interference this technology would be best. Using Orthogonal Frequency Divisional Multiplexing (OFDM)- a digital modulation technique , researchers enabled micro-LED light bulbs to handle millions of changes in light intensity per second, effectively behaving like an extremely fast on/off switch. This helps in sending large amount of binary data - a series of ones and zeros - to be transmitted at very high speed. The researchers used the three primary colors - red, green, blue to transmit data.

What achieved!!

Chinese achieved the speed of 3.5 Gbps through LED bulbs. While UK scientist’s one step ahead reports that they got 10 Gbps speed that is 250 times faster than the any ‘super-fast’ broadband. Fraunhofer Heinrich Hertz Institute in Germany achieved 3 GB per second speed this year.

How differ from Wi- Fi!!

Both transfer data over electromagnetic spectrum but Li- Fi uses visible light and Wi-Fi utilizes the radio waves for wireless internet access. Speed of data transfer is high in Li-Fi .As Wi-Fi uses the radio spectrum which is limited so only limited number of router and tower can deploy. Li Fi while can be deployed in every day LED bulbs which covers the entire building through light based connection. The data connection speed can reach in Gbps.

Drawbacks!!

 It is dependent on light ,so cannot work in darkness as light not penetrates walls.Lifi receiver must be within 3 meter diameter of router and placed in the LED bulbs so that sensor read it easily.

Li-Fi system is not portable.

Cyber-attack strategy – WATERING HOLE

Cyber-attack strategy – WATERING HOLE

Nowadays cybercriminal develops a new strategy for cyber-attack known as “watering hole”. Cybercriminals again prove that they are one step ahead – no security method or procedure can stop them. They are so skilled that they can get any information.

In watering hole attack, hacker leverages cloud services to help in accessing the most secure government agencies and private enterprisers also.

Talking about PAST :

In earlier days, attacker using the email which is bad worded or like “I LOVE U” or getting wealth /lottery. Attackers target the individuals of a specific company through phishing attack so that they can access the company critical information. These specific  targeted individuals helps in navigate the organization employees hierarchy  or  identify  digital certificate compromises  that leads to access and gives control  over  the  organization infrastructure.

NOWADAYS:

Nowadays employees are aware so they discard the email. The most sophisticated type of attack is hitting the enterprise through “Watering Hole Attack”. In this attack, attacker insert the malicious code in the site that company trust. For this they stalk an employee or group in order to insert malicious code in company.

How to find TRUST sites::

To insert the malicious code in the most visited sites like yahoo, espn.com or cnn.com is very tough because they are less vulnerable. So insert the code into less secure site which mostly frequented by employees of targeted company.

Attacker find the most frequent site by automated tracking methods used by marketing and ad tracking services when employees surfs internet from their  company. This method helps in identifying the traffic patterns and access.  These tracking services are mapping the web pattern behavioral of the organization. This indicates which sites employees frequently visited. This information helps the attacker to deduce the organization browsing history and cloud services access policies. In other words, it tells an attacker about which watering hole you let your employees visit.

WAIT!!

The attacker plants the malicious code in watering hole site. They also insert the code in less secure blogs and the most vulnerable sites. They wait for the users to visit the frequently visited sites in past. When user visits the sites, the malicious code redirects the user’s browser to malicious sites and user’s machine can be assessed for vulnerabilities. The probability of success is usually high because attacker uses the tracking services’ data to confirm that traffic to sites is allowed and frequent.

After in TRAP-- Ready for real attack::

When user steps in trap, then attacker start assessing for vulnerabilities and exploits. When user visits the watering hole, a small piece of code is downloaded in the background automatically so there is no need to click or download any code or file. This is possible by drive -by downloading techniques. Once the code run, it searches for recently discovered exploits and zero -day vulnerabilities. Because there is a chance those users have not patched these exploits in Java, Internet Explorer, and Flash or Adobe reader. If attacker got success in finding the vulnerabilities /exploits and then depending on the user's access right, he can access sensitive and critical information of the company. The sensitive information means Internet protocol, customer’s information, employee’s data or financial data.