The security hole in WAP: An analysis of the network and business rationales underlying a failure

International Journal of Electronic Commerce

Volumn 7, Issue 4, 2003, Pages 73-92

  Juul, Niels Christian ^a   Jørgensen, Niels ^a  

^a ROSKILDE UNIVERSITY   (Denmark)

Author keywords

Gateway; Internet; Mobile commerce; Protocols; Security; Standards; Wap

Indexed keywords

EID: 27544467699     PISSN: 10864415     EISSN: None     Source Type: Journal    
DOI: 10.1080/10864415.2003.11044279     Document Type: Article

References (23)

1. Ashley, P.; Hinton, H.; and Vandenwauver, M. Wired versus wireless security: The Internet, WAP and iMode for e-commerce. In Proceedings of the Seventeenth Annual Computer Security Applications Conference (ACSAC). Los Alamitos, CA: IEEE Computer Society Press, 2001.
2. Dierks, T., and Allen, C. The TLS protocol version 1.0. RFC 2246. Available at www.rfc-editor.org/rfc/rfc2246.txt.
3. Durham-Vichr, D., and Getgen, K. Securing the Internet without wires. Available at www-106.ibm.com/developerworks/library/wi-sectrends/ (August 2001).
4. Gordon, S.; Kristensen, L.M.; and Billington, J. Verification of a revised WAP wireless transaction protocol. In J. Javier Esparza and C. Lakos (eds.), Proceedings of the International Conference on Application and Theory of Petri Nets (ICATPN) 2002, Lecture Notes in Computer Science 2360. Berlin: Springer-Verlag, pp. 182-202.
5. Klein, S.T.; Bookstein, A.; and Deerwester, S. Storing text retrieval systems on CD-ROM: Compression and encryption considerations. ACM Transactions on Information Systems, 7, 3 (July 1989), 230-245.
6. Megler, V. iMode. From bandwidth problem into Internet phenomenon. Available at www-106.ibm.com/developerworks/library/wi-imode/ ?dwzone=wireless/ (February 2002).
7. Phone.Com. Understanding security on the wireless Internet. White paper WPSE-R4-001, 2000. Available at www.cmlab.csie.ntu.edu.tw/cml/ db/WAP/Security-WP.pdf (May 5, 2003).
8. Ponce, D., and Soriano, M. Secure intelligent broker for m-commerce. In V. Milutinovic (ed.), Proceedings of the SSGRR 2001: International Conference on Advances in Infrastructure for Electronic Business, Science, and Education on the Internet. L'Aquila, Italy: Scuola Superiore G. Reiss Romoli (SSGRR), August 2001, CD-ROM.
9. Saltzer, J.H.; Reed, D.P.; and Clark, D.D. End-to-end arguments in system design. ACM Transactions on Computer Systems, 2, 4 (November 1984), 277-288.
10. Singhal, S.; Bridgman, T.; Suryanarayana, L.; Mauney, D.; Alvinen, J.; Bevis, D.; Chan, J.; and Hild, S. WAP: The Wireless Application Protocol Writing Applications for the Mobile Internet. New York: ACM Press, 2001.
11. Tanenbaum, A.S. Computer Networks, 3d ed. Upper Saddle River, NJ: Prentice Hall, 1996.
12. WAP Forum. WAP Architecture: Wireless Application Protocol Architecture Specification. Approved Specification. WAP 100, WAP Forum Ltd., www.wapforum.org (part of the June 2000 [WAP 1.2.1] conformance release).
13. WAP Forum. WAP Architecture: Wireless Application Protocol Architecture Specification. Approved Specification. WAP 210, WAP Forum Ltd., www.wapforum.org (part of the July 2001 [WAP 2.0] conformance release).
14. WAP Forum. WAP Transport Layer End-to-End Security: Wireless Application Protocol. Approved Specification. WAP 187, WAP Forum Ltd., www.wapforum.org (part of the July 2001 [WAP 2.0] conformance release).
15. WAP Forum. WAP TLS Profile and Tunneling WAP-219-TLS: Wireless Application Protocol TLS Profile and Tunneling Specification. Approved Specification. WAP 219, WAP Forum Ltd., www.wapforum.org (part of the July 2001 [WAP 2.0] conformance release).
16. WAP Forum. WAP WSP: Wireless Application Protocol Wireless Session Protocol Specification. Approved Specification. WAP 203, WAP Forum Ltd., www.wapforum.org (part of the June 2000 [WAP 1.2.1] conformance release).
17. WAP Forum. WAP WTAI: Wireless Application Protocol Wireless Telephony Application Interface Specification. Approved Specification. WAP 170, WAP Forum Ltd., www.wapforum.org (part of the June 2000 [WAP 1.2.1] conformance release).
18. WAP Forum. WAP WTLS: Wireless Application Protocol Wireless Transport Layer Security Specification. Approved Specification. WAP 199, WAP Forum Ltd., www.wapforum.org (part of the June 2000 [WAP 1.2.1] conformance release).
19. WAP Forum. WAP WTLS: Wireless Application Protocol Wireless Transport Layer Security Specification. Approved Specification. WAP 261, WAP Forum Ltd., www.wapforum.org (part of the July 2001 [WAP 2.0] conformance release).
20. WAP Forum. Wireless Application Protocol Identity Module Specification (WIM) Part: Security. Approved Specification. WAP 198, WAP Forum Ltd., www.wapforum.org (part of the June 2000 [WAP 1.2.1] conformance release).
21. WAP Forum. WML Script Crypto Library: Wireless Application Protocol WMLScript Crypto Library Specification. Approved Specification. WAP 161, WAP Forum Ltd., www.wapforum.org (part of the June 2000 [WAP 1.2.1] conformance release).
22. WAP Forum. WML Script Crypto Library: Wireless Application Protocol WMLScript Crypto Library Specification. Approved Specification. WAP 161, WAP Forum Ltd., www.wapforum.org (part of the July 2001 [WAP 2.0] conformance release).
23. WAP Forum. Official Wireless Application Protocol: The Complete Standard with Searchable CD-ROM. New York: John Wiley, 1999.