Skip to content
DSML.KZ
Publications

Talk · International Conference on Internet of Things: Systems, Management and Security · December 2, 2025

Assessing the Success of Evil Twin Attacks in WPA3-Enterprise Networks

Сакен Тлеубердин, Дина Сатыбалдина, Tolegen Aidynov, Aliya Issainova, Zhaniya Magmur, Gulsipat Abisheva

Tolegen Aidynov
Open via DOI

Abstract

This work presents an experimental vulnerability evaluation in a WPA3-Enterprise scenario to evaluate the performance of the current WPA3 security methods over different devices and operating systems, including iOS, macOS, Ubuntu, and Windows. We constructed a testing infrastructure with Kali Linux and employed the ALFA AWUS036AXML adapter, in combination with Hostapd and FreeRADIUS software, to setup RADIUS servers and a rogue access point. We evaluated multiple client connection situations to a rogue access point utilizing three device configurations: Safe (compulsory CA certificate verification), Weak (server certificate verification disabled or CA not installed), and Mixed (device trusts the non-valid CA certificate). The experimental results indicated that Evil Twin attacks were effective against clients operating on Ubuntu 24.04.2 and Windows 10, attributable to inadequate certificate verification configurations. We provided guidelines to mitigate risks.

Network Security and Intrusion DetectionAdvanced Authentication Protocols SecurityWireless Networks and Protocolsevil twin attacksWPA3rogue access points

More by Tolegen Aidynov