on weakly encrypted systems such as WEP, where there are a number of tools available which can launch a dictionary style attack of "possibly accepted" security keys based on the "model" security key captured during the network recovery. Network injection In a network injection attack, a hacker can make use of access points that are exposed to non-filtered network traffic, specifically broadcasting network traffic such as “Spanning Tree” (802.1D), OSPF, RIP, and HSRP. The hacker injects bogus networking re-configuration commands that affect routers, switches, and intelligent hubs. A whole network can be brought down in this manner and require rebooting or even reprogramming of all intelligent networking devices. Caffe Latte attack The Caffe Latte attack is another way to obtain a WEP key and does not require a nearby access point for the target network. The Caffe Latte attack works by tricking a client with the WEP password stored to connect to a malicious access point with the same SSID as the target network. After the client connects, the client generates ARP requests, which the malicious access point uses to obtain keystream data. The malicious access point then repeatedly sends a deauthentication packet to the client, causing the client to disconnect, reconnect, and send additional ARP requests, which the malicious access point then uses to obtain additional keystream data. Once the malicious access point has collected a sufficient amount of keystream data. the WEP key can be cracked with a tool like [aircrack-ng]. The Caffe Latte attack was demonstrated against the Windows wireless stack, but other operating systems may also be vulnerable. The attack was named the "Caffe Latte" attack by researchers Md Sohail Ahmad and Vivek Ramachandran because it could be used to obtain the WEP key from a remote traveler in less than the 6 minutes it takes to drink a cup of coffee. Wireless intrusion prevention concepts There are three principal ways to secure a wireless network. For closed networks (like home users and organizations) the most common way is to configure access restrictions in the access points. Those restrictions may include encryption and checks on MAC address. Wireless Intrusion Prevention Systems can be used to provide wireless LAN security in this network model. For commercial providers, hotspots, and large organizations, the preferred solution is often to have an open and unencrypted, but completely isolated wireless network. The users will at first have no access to the