Analysis of the 802.111 4-way handshake

Proceedings of the 2004 ACM Workshop on Wireless Security, WiSe

Volumn , Issue , 2004, Pages 43-50

  He, Changhua ^a   Mitchell, John C ^a  

^a Stanford University   (United States)

Author keywords

4 Way Handshake; 802.11i; Authentication; Denial of Service; Key Management; WLAN

Indexed keywords

4-WAY HANDSHAKE; 802.11I; AUTHENTICATION; DENIAL-OF-SERVICES (DOS); KEY MANAGEMENT;

CRYPTOGRAPHY; DATA COMMUNICATION EQUIPMENT; LOCAL AREA NETWORKS; MATHEMATICAL MODELS; NETWORK PROTOCOLS; SECURITY OF DATA;

TELECOMMUNICATION NETWORKS;

EID: 11244278744     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (18)

1. Aboba, B., and Simon, D. PPP EAP ILS authentication protocol. RFC 2716, October, 1999.
2. Aiello, W., Bellovin, S. M., Blaze, M., Ioannidis, J., Reingold, O., Canetti, R., and Keromytis, A. D. Efficient, DoS-Resistant, Secure Key Exchange for Internet Protocols. In Proceedings of the 9th ACM conference on Computer and communications security, pages 48-58, Washington D. C., USA, 2002.
3. Arbaugh, W. A., Shankar, N., and Wang, J. Your 802.11 Network has no Clothes. In Proceedings of the First IEEE International Conference on Wireless LANs and Home Networks, pages 131-144, December, 2001.
4. Aura, T., and Nikander, P. Stateless Connections. In Proceedings of International Conference on Information and Communications Security (ICICS'97), pages 87-97, Beijing, November, 1997.
5. AusCERT AA-2004.02. Denial of Service vulnerability in IEEE 802.11 wireless devices. May 13, 2004. Available at http://www.auscert.org.au/render. html?it=4091.
6. Bellardo, J., and Savage, S. 802.11 Denial-of-Service attacks: real vulnerabilities and practical solutions. In Proceedings of the USENIX Security Symposium, pages 15-28, August, 2003.
7. Borisov, N., Goldberg, I., and Wagner, D. Intercepting mobile communications: the insecurity of 802.11. In Proceedings of the 7th Annual International Conference on Mobile Computing and Networking, Rome, Italy, July, 2001.
8. Dill, D. L. The Murφ verification system. In the 8th International Conference on Computer Aided Verification, pages 390-393, July, 1996.
9. IEEE Standard 802.11-1999. Information technology -Telecommunications and information exchange between systems - Local and metropolitan area networks - Specific requirements - Part 11: Wireless LAN Medium Access Control and Physical Layer Specifications. 1999.
10. IEEE Standard 802.11b-1999. Higher-Speed Physical Layer Extension in the 2.4 GHz Band, Supplement to IEEE Standard for Information technology - Telecommunications and information exchange between systems - Local and metropolitan area networks - Specific requirements - Part 11: Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications. September, 1999.
11. IEEE Standard 802.1X-2001. IEEE Standard for Local and metropolitan area networks - Port-Based Network Access Control. June, 2001.
12. IEEE P802.11i/D10.0. Medium Access Control (MAC) Security Enhancements, Amendment 6 to IEEE Standard for Information technology - Telecommunications and information exchange between systems - Local and metropolitan area networks - Specific requirements - Part 11: Wireless Medium Access Control (MAC) and Physical Layer (PHY) Specifications. April, 2004.
13. Matsuura, K., and Imai, H. Modified Aggressive Mode of Internet Key Exchange Resistant against Denial-of-Service Attacks. IEICE Transactions on Information and Systems, Volume E83-D(5), pages 972-979, May, 2000.
14. Mitchell, J. C., Mitchell, M., and Stern, U. Automated Analysis of Cryptographic Protocols Using Murφ. IEEE Symposium on Security and Privacy, pages 141-151, 1997.
15. Mitchell, J. C., Shmatikov, V., and Stern, U. Finite-State Analysis of SSL 3.0. Seventh USENIX Security Symposium, pages 201-216, 1998.
16. Ricciulli, L., Lincoln, P., and Kakkar, P. TCP SYN Flooding Defense. In Communication Networks and Distributed Systems Modeling and Simulation (CNDS'99), 1999.
17. Rigney, C., Willens, S., Rubens, A., and Simpson, W. Remote Authentication Dial In User Service (RADIUS). RFC 2865, June, 2000.
18. Schuba, C. L., Krsul, I. V., Kühn, M. G., Spafford, E. H., Sundram, A., and Zamboni, D. Analysis of a Denial of Service attack on TCP. 7997 IEEE Symposium on Security and Privacy, 1997.