Security issues in IEEE 802.11 wireless local area networks: A survey

Wireless Communications and Mobile Computing

Volumn 4, Issue 8, 2004, Pages 821-833

  Mishra, Arunesh ^a   Petroni Jr , Nick L ^a,b   Arbaugh, William A ^a   Fraser, Timothy ^a  

^a University of Maryland ^*  (United States)

^b NONE   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ALGORITHMS; ANTENNAS; COMPUTER HARDWARE; INTEROPERABILITY; JAMMING; PERSONAL DIGITAL ASSISTANTS; SECURITY OF DATA; WIRELESS TELECOMMUNICATION SYSTEMS;

ACCESS CONTROL LISTS (ACL); MEDIUM ACCESS CONTROL (MAC); WILRESS LOCAL AREA NETWORKS; WIRED EQUIVALENT PRIVACY (WEP);

TELECOMMUNICATION NETWORKS;

EID: 13244264852     PISSN: 15308669     EISSN: None     Source Type: Journal    
DOI: 10.1002/wcm.257     Document Type: Review

References (28)

1. Information Technology - Telecommunications and Information Systems - Local and metropolitan area networks -Specific requirements - Part 11: Wireless LAN Media Access Control (MAC) and Physical Layer (PHY) specifications. ISO/IEC 8802-11 ANSI/IEEE Std 802.11-1999, 1999.
2. Arbaugh WA, Shankar N, Wang J. Your 802.11 Network has no Clothes. In Proceedings of the First IEEE International Conference on Wireless LANs and Home Networks, December 2001.
3. Rivest RL. The RC4 Encryption Algorithm. March 1992. RSA Data Security, Inc. (proprietary).
4. Cam-Winget N, Housley R, Wagner D, Walker J. Security flaws in 802.11 data link protocols. Communications of the ACM 2003; 46(5): 35-39.
5. Housley R, Arbaugh WA. Security problems in 802.11-based networks. Communications of the ACM 2003; 46(5): 31-34.
6. Amendment to STANDARD FOR Telecommunications and Information Exchange Between Systems - LAN/MAN Specific Requirements - Part 11: Wireless Medium Access Control (MAC) and Physical Layer (PHY) Specifications: Medium Access Control (MAC) Security Enhancements. Amendment to ISO/IEC 8802-11/1999(1) ANSI/IEEE Std 802.11, 1999 edition), 2004.
7. Wi-Fi Protected Access. Url: http://www.wi-fi.org/.
8. IEEE Standard for Local and Metropolitan Area Networks - Port-Based Network Access Control. IEEE Std 802.1X-2001, 2001.
9. Rigney C, Rubens A, Simpson W, Willens S. Remote Authentication Dial In User Service(RADIUS). RFC 2138, April 1997.
10. Rigney C, Willats W, Calhoun P. RADIUS Extensions. RFC 2869, June 2000.
11. Blunk L, Vollbrecht J. PPP Extensible Authentication Protocol (EAP). RFC 2284, March 1998.
12. Aboba B, Simon D. PPP EAP TLS Authentication Protocol. RFC 2716, October 1999.
13. Arbaugh WA. An Inductive Chosen Plaintext Attack Against WEP/WEP2. IEEE Document 802.11-02/230, May 2001.
14. Petroni NL, Jr., Arbaugh WA. The dangers of mitigating security design flaws: a wireless case study. IEEE Security and Privacy Magazine 2003; 1(1): 28-36.
15. Borisov N, Goldberg I, Wagner D. Intercepting mobile communications: the insecurity of 802.11. In Proceedings of the Seventh Annual International Conference on Mobile Computing and Networking, July 2001.
16. Walker JR. Unsafe at any key size: an analysis of the WEP encapsulation. IEEE 802.11 Task Group E IEEE 802.11/00-362, October 2000.
17. Fluhrer S, Martin I, Shamir A. Weaknesses in the key scheduling algorithm of RC4. In Proceedings of the 8th Annual Workshop on Selected Areas in Cryptography, August 2001.
18. Stubblefield A, Ioannidis J, Rubin AD. Using the Fluhrer, Mantin and Shamir attack to break WEP. In Proceedings of the 2002 Network and Distributed Systems Security Symposium, 2002.
19. Burrows M, Abadi M, Needham R. A logic of authentication. ACM Transactions on Computer Systems 1990; 8:1.
20. Simpson W. PPP Challenge Handshake Authentication Protocol (CHAP). RFC 1994, August 1996.
21. Rivest R, Dusse S. The MD5 Message-Digest Algorithm. RFC 1321, April 1992.
22. Draft Standard for Local and Metropolitan Area Networks - Port-Based Network Access Control (Revision). IEEE P802.1X-REV/D10, 2004.
23. Eronen P, Vollbrecht J, Petroni N, Ohba Y. State Machines for Extensible Authentication Protocol (EAP) Peer and Authenticator. draft-ietf-eap-statemachine-03, March 2004.
24. Aboba B, Blunk L, Vollbrecht J, Carlson J, Levkowetz H. Extensible Authentication Protocol (EAP). RFC 3748, June 2004.
25. An Opensource Implementation of the IEEE 802.1X Standard. Website: http://www.openlx.org.
26. Bellardo J, Savage S. 802.11 Denial-of-service attacks: real vulnerabilities and practical solutions. In Proceedings of the 12th USENIX Security Symposium, August 2003.
27. Mishra A, Arbaugh WA. An Initial Security Analysis of the IEEE 802. IX Standard. Technical Report CS-TR-4328, University of Maryland, Department of Computer Science, February 2002.
28. Chen D, Deng J, Varshney PK. Protecting Wireless Networks against a Denial of Service Attack Based on Virtual Jamming. September 2003. Student Poster at ACM MOBICOM 2003.