From wired internet to ubiquitous wireless internet
|
|
|
- Rosaline Mosley
- 6 years ago
- Views:
Transcription
1 WlanSmartcard.org Technical Committee Wireless LAN A primer guide. Paris, February 5 th Pascal.Urien@enst.fr From wired internet to ubiquitous wireless internet 1
2 Classical intranet. Network access is restricted to authorized staff. PCs are physically connected by RJ45 plugs. DHCP servers are unsecured, intranet services are freely available (indoors). DHCP Server RJ45 Plug My dot.com Corporate services Mail Server Web Server Internet Firewall Restricted To authorized staff Service Set Identifier SSID Wireless LAN Distribution System Access Point WLAN a/b/g Basic Set Service STAtion What the market needs : Prevention of parking lot attack Access Control Billing & non repudiation AAA infrastructure Wireless Plug DHCP Server RJ45 Plug PORTAL Mail Server Radius Server AP Firewall Internet Parking Lot attack? 2
3 New Services Wireless access to corporate networks (intranet) or to the internet. Access control is mandatory in many environments (who is using my network?). Non repudiation (frame signature) is a pre-requisite for service billing. Wireless user privacy is a plus. But it may be performed at application level. Small Demonstration 3
4 Radio Link Security Radio Security 1 st generation Wireless Equivalent Privacy (WEP), defined in standard 2 nd generation, 802.1x architecture (with WEP). 3 nd generation, 802.1i, TKIP, hardware compatible with WEP 4 nd generation, 802.1i + AES, hardware incompatible with WEP. 4
5 WEP Works with for four static shared secrets and RC4 keys (64/128 bits), not scalable 1G Many security threats, Authentication, Data Integrity, Data Privacy. 2G - Periodic Authentication, Uses re-keying mechanisms (10,000 frames recommended, security limit at about one million frames.) Frame MAC HEADER IV KeyID 2 bits Ciphered block 24 bits 40/104 bits IV Shared Secret RC4 PRNG Body CRC XOR KeyStream A WEP frame RC4 key, 64/128 bits WEP 1G, Key Management, not scalable Shared secrets 5
6 IEEE 802.1x -TLS 802.1x Stack SSL authentication scenario/other -TLS RADIUS RADIUS Shared secret 802 Frames 802 Frames UDP/IP UDP/IP Station Access Point RADIUS Server Wireless Cell IP Network Traffic Filtering 6
7 802.1x Typical Use. Port Based Network Access Protocol Deals with (RFC 2284) protocol and RADIUS (RFC 2058). It is a key distribution architecture. Station (STA) sends an association request to the access point (AP). Station sends a 802.1x -EOL start message to AP. (1) Access Point AP sends an identity request to the station (2) Station produces an identity response. AP forwards this message to the RADIUS Server (RS), of which address is deduced from the identity parameter. (3) A set of request and response messages are exchanged between RS and STA and forwarded by AP. At the end of the authentication scenario, RS delivers a success notification to STA. RS and STA share a session key SK. (4) RS sends SK to AP. AP chooses a master key MK, other WEP keyor TKIP master key. (5) AP sends MK to STA, encrypted by the session key SK x architecture. Support / LAN / RADIUS STAtion Associate 1 Identity Request 2 Identity Response Identity Response Kent@comics.com SK Start Authentication Request Authentication Response -Success Access Point Authenticator Authentication Request Authentication Response -Success Authentication Server - RADIUS comics.com 3 SK SK(MK) 5 SK 4 MK MK 7
8 IEEE 802.1i - TKIP 802.1i TKIP New version of WEP, called TKIP, Temporal Key Integrity Protocol. Hardware compatible with WEP Per Packet Key (RC4 128 bits). Strong Packet Signature (Message Integrity Code). Master Key Distributed via 802.1x Ephemeris key (Transient Key), can be updated via a re-keying process. 8
9 TKIP frame (not yet standardized) Temporal Key 128 bits Master Key Transient Key 256 bits TX MIC Key 64 bits Rekeying RX MIC Key 64 bits MAC Address Temporal Key IV32 MSB (32 bits) Phase 1 Hash 80 bits array 16 bits bits 16 bits bits 16 bits 80 bits array Temporal Key Extended IV16 LSB (24 bits) Phase 2 Hash IV32 IV48 IV16 Hi8(IV16) (Hi8(IV16) 0x20) & 0x7F Lo8(IV16) Per Packet Key bits Extended IV16( 24 bits) = RC4 Key 24 bits Encrypted Data RC4 Key 104 bits Extended IV16 24 bits KeyID 8 bits IV32 32 bits DATA MIC 64 bits CRC 32 bits Extensible Authentication Protocol - 9
10 What is? An umbrella of authentication schemes shuttled by packets. Defines user Identity concept, a Network Access Identifier. One authentication scheme (Type field) per authentication server, MD5 Challenge, a digest is computed from a random value and a shared secret. PPP TLS a protocol based on SSL mechanisms. IAKERB, adaptation of Kerberos V5 procedures. SIM, reuse of SIM smartcards (GSM 11.11). AKA, support of USIM smartcards (UMTS security modules). Who is supporting? Normalization Committees. IETF - RFC IEEE x. Javacard forum Network Manufacturers CISCO. NOKIA. Operating System Manufacturers Microsoft XP. 10
11 umbrella. 1 Request 2 Response 3 Success 4 Failure Packet Identifier Packet Length Code Identifier Length Type Type-Data Superman@comics.com Authentication Type comics.com Authentication Server WLAN Card 1 Identity 2 Notification 3 NAK 4 MD5 challenge 18 SIM- Authentication Schemes TLS Chap/MD5 Kerberos SIM/USIM Extensible Authentification Protocol Messages Transport Layer Network over RADIUS TCP/IP Over LAN - OL IEEE GSM versus Wi-Fi Attribute GSM WiFi Network Identifier Implicit SSID User Identifier IMSI. Operator dependant NAI. One per WiFi. Authentication Methods A3,A8 plus Ki Key MD5, TLS, Kerberos, Other. Network Access Identifier - NAI - rfc 2486 superman@comics.com login Authentication (radius) server Authentication Scheme Microsoft PKI GSM operators 11
12 OS Glue Operating Software Glue. OS software glue Messages Master Key 12
13 XP Operations. _Info = GetInfo(_Type) provider (DLL) GetIdentity () DIALOG BOX OK Wireless Interface Packet _Info Initialize() Begin() Message() End() Authentication Protocol User Key(s) Software glue InvokeConfigUserInterface() DIALOG BOX Protocol Configuration Standard Smartcard Interface WLAN CARD OK Use cases 13
14 -SIM Operator Wireless LAN OWLAN Charging gateway Example1, -SIM, Mobile. SIM module IMSI Operator Domain NAI Identity K_int K-randsres RANDi Ki A 3 A 8 SRESi Kci NONCE SHA-1 K_Master SHA- 1 K-encr Application specific keys Authenticator Client Set-Identity(1IMSI@domain ) -Packet() WLAN Card _TYPE = -SIM 14
15 L - NT like authentication. Dedicated to MS platforms. Example 2, L, MS Code 0x01 Identifier Length Type 0x11 Version 0x01 Unused 0x00 Count 0x08 Peer Challenge Peer Challenge User Name... Password Hash-MD4 = 16 bytes + 5 nul bytes = 3 DES Keys (7 octets) Code 0x02 Identifier Length Type 0x11 Version 0x01 Unused 0x00 Count 0x18 MS_CHAP Peer Response MS_CHAP Peer Response MS_CHAP Peer Response MS_CHAP Peer Response MS_CHAP Peer Response MS_CHAP Peer Response User Name Response = 24 bytes =(Des 1,Des 2,Des 3 )(challenge 8 octets ) Set-Identity(MyUserName) -Packet() WLAN Card _TYPE = L 15
16 -TLS, PKI Architecture Supported by MS platforms. Example 3, TLS, PKI. <- -Request/Identity Digest MD5+SHA-1 36 octets PrivateExponent (Modulus) RSA Signature -Response/Identity (MyID)------> -Response/-Type=-TLS (TLS client_hello) > -Response/-Type=-TLS TLS certificate, TLS client_key_exchange, [TLS certificate_verify,] TLS change_cipher_spec, TLS finished) > -Response/-Type=-TLS > <- -Request/-Type=-TLS/ TLS Start <- -Request/-Type=-TLS TLS server_hello, TLS certificate, [TLS server_key_exchange,] [TLS certificate_request,] TLS server_hello_done) <- -Request/ -Type=-TLS (TLS change_cipher_spec, TLS finished) <- -Success Set-Identity(MyUserName) -Packet() WLAN Card _TYPE = -TLS 16
17 Protected - P Normalization initiative. 17
18 55th IETF Atlanta, GA, November 17-21, 2002 support in smartcards Draft-urien--smartcard-00.txt Draft Objectives. support in smartcards. is computed in smartcard. Profiles definition, for some types (-SIM, -TLS, ) Interoperability between ISO 7816 smartcards. Agreement between major smartcard manufacturers. Four service primitives. Get-Next-identity() Set-Identity() -Packet() Get-RSN-Master-Key() ENGINE SIM IAK KERB TLS MD5 AKA Smartcard 18
19 JCF javacard API WISP Applet Service Provider Interface -API JavaCard Run time Environment Java Virtual Machine API Framework Classes APIs Smartcard OS Engine Files Management Cryptographic Security IO Library Management Management ISO APDUs IETF Draft User Interface 19
Integrating EAP in SIM-IP smartcards
Integrating in -IP smartcards 1 Pascal Urien, 1 Adel Tizraoui, 1 Marc Loutrel, 2 Karen Lu. 1 SchlumbergerSema, 36-38 rue de la Princesse, BP 45, 78431 Louveciennes Cedex, France Smartcard Research Center
A demonstration is available in which the OpenEapSmartcard.NET device is used as an authentication token, controlling the access to a Wi-Fi network.
1. Summary. T he goal of this project is to release a dotnet smartcard providing authentication services for network resources such as PPP, Wi-Fi and VPN (Virtual Private Network). The Extensible Authentication
Security in IEEE Networks
Security in IEEE 802.11 Networks Mário Nunes, Rui Silva, António Grilo March 2013 Sumário 1 Introduction to the Security Services 2 Basic security mechanisms in IEEE 802.11 2.1 Hidden SSID (Service Set
EAP-TLS Smartcards, from Dream to Reality
s, from Dream to Reality 1 Pascal Urien, 1 Mohamad Badra, 2 Mesmin Dandjinou 1-ENST Paris, 2-Université Polytechnique de Bobo-Dioulasso, Burkina Faso. Pascal.Urien@enst.fr, badra@enst.fr, mesmin.dandjinou@voila.fr
Csci388. Wireless and Mobile Security Access Control: 802.1X, EAP, and RADIUS. Importance of Access Control. WEP Weakness. Wi-Fi and IEEE 802.
WEP Weakness Csci388 Wireless and Mobile Security Access Control:, EAP, and Xiuzhen Cheng cheng@gwu.edu 1. IV is too short and not protected from reuse 2. The per packet key is constructed from the IV,
CSCE 715: Network Systems Security
CSCE 715: Network Systems Security Chin-Tser Huang huangct@cse.sc.edu University of South Carolina Web Security Web is now widely used by business, government, and individuals But Internet and Web are
Protocols, Technologies and Standards Secure network protocols for the OSI stack P2.1 WLAN Security WPA, WPA2, IEEE i, IEEE 802.1X P2.
P2 Protocols, Technologies and Standards Secure network protocols for the OSI stack P2.1 WLAN Security WPA, WPA2, IEEE 802.11i, IEEE 802.1X P2.2 IP Security IPsec transport mode (host-to-host), ESP and
Managing and Securing Computer Networks. Guy Leduc. Chapter 7: Securing LANs. Chapter goals: security in practice: Security in the data link layer
Managing and Securing Computer Networks Guy Leduc Chapter 7: Securing LANs Computer Networking: A Top Down Approach, 7 th edition. Jim Kurose, Keith Ross Addison-Wesley, April 2016. (section 8.8) Also
Transport Layer Security
CEN585 Computer and Network Security Transport Layer Security Dr. Mostafa Dahshan Department of Computer Engineering College of Computer and Information Sciences King Saud University mdahshan@ksu.edu.sa
Wireless Communications and Mobile Computing
WNMC-MPR-Sec 1 Wireless Communications and Mobile Computing MAP-I Jaime Dias, Manuel Ricardo Faculdade de Engenharia da Universidade do Porto SECURITY - BASIC CONCEPTS WNMC-MPR-Sec 2 WNMC-MPR-Sec 3 Symmetric
Wireless Network Security
Wireless Network Security Raj Jain Washington University in Saint Louis Saint Louis, MO 63130 Jain@cse.wustl.edu Audio/Video recordings of this lecture are available at: http://www.cse.wustl.edu/~jain/cse571-11/
Link & end-to-end protocols SSL/TLS WPA 2/25/07. Outline. Network Security. Networks. Link and End-to-End Protocols. Link vs. End-to-end protection
T H E U N I V E R S I T Y O F B R I T I S H C O L U M B I A Outline Network Security EECE 412 Link & end-to-end protocols SSL/TLS WPA Copyright 2004 Konstantin Beznosov 2 Networks Link and End-to-End Protocols
PROTECTED EXTENSIBLE AUTHENTICATION PROTOCOL
Q&A PROTECTED EXTENSIBLE AUTHENTICATION PROTOCOL This document answers questions about Protected Extensible Authentication Protocol. OVERVIEW Q. What is Protected Extensible Authentication Protocol? A.
Cisco Wireless LAN Controller Module
Cisco Wireless LAN Controller Modules Simple and secure wireless deployment and management for small and medium-sized businesses (SMBs) and enterprise branch offices Product Overview Cisco Wireless LAN
Configuring the Client Adapter through the Windows XP Operating System
APPENDIX E through the Windows XP Operating System This appendix explains how to configure and use the client adapter with Windows XP. The following topics are covered in this appendix: Overview, page
TLS. RFC2246: The TLS Protocol. (c) A. Mariën -
TLS RFC2246: The TLS Protocol What does it achieve? Confidentiality and integrity of the communication Server authentication Eventually: client authentication What is does not do Protect the server Protect
Transport Level Security
2 Transport Level Security : Security and Cryptography Sirindhorn International Institute of Technology Thammasat University Prepared by Steven Gordon on 28 October 2013 css322y13s2l12, Steve/Courses/2013/s2/css322/lectures/transport.tex,
Wireless LAN Security. Gabriel Clothier
Wireless LAN Security Gabriel Clothier Timeline 1997: 802.11 standard released 1999: 802.11b released, WEP proposed [1] 2003: WiFi alliance certifies for WPA 2004: 802.11i released 2005: 802.11w task group
Configuring the Client Adapter through the Windows XP Operating System
APPENDIX E Configuring the Client Adapter through the Windows XP Operating System This appendix explains how to configure and use the client adapter with Windows XP. The following topics are covered in
Overview. SSL Cryptography Overview CHAPTER 1
CHAPTER 1 Secure Sockets Layer (SSL) is an application-level protocol that provides encryption technology for the Internet. SSL ensures the secure transmission of data between a client and a server through
Securing Your Wireless LAN
Securing Your Wireless LAN Pejman Roshan Product Manager Cisco Aironet Wireless Networking Session Number 1 Agenda Requirements for secure wireless LANs Overview of 802.1X and TKIP Determining which EAP
Lecture 33. Firewalls. Firewall Locations in the Network. Castle and Moat Analogy. Firewall Types. Firewall: Illustration. Security April 15, 2005
Firewalls Lecture 33 Security April 15, 2005 Idea: separate local network from the Internet Trusted hosts and networks Intranet Firewall DMZ Router Demilitarized Zone: publicly accessible servers and networks
TopGlobal MB8000 Hotspots Solution
MB8000 s MB8000 is a mobile/portable wireless communication gateway. It combines the best of Wi-Fi technology and 2.5G/3G mobile communication technology. WISP can deploy their wireless hotspots with MB8000
Chapter 24 Wireless Network Security
Chapter 24 Wireless Network Security Wireless Security Key factors contributing to higher security risk of wireless networks compared to wired networks include: o Channel Wireless networking typically
Transport Layer Security
Cryptography and Security in Communication Networks Transport Layer Security ETTI - Master - Advanced Wireless Telecommunications Secure channels Secure data delivery on insecure networks Create a secure
Outline : Wireless Networks Lecture 10: Management. Management and Control Services : Infrastructure Reminder.
Outline 18-759: Wireless Networks Lecture 10: 802.11 Management Peter Steenkiste Departments of Computer Science and Electrical and Computer Engineering Spring Semester 2016 http://www.cs.cmu.edu/~prs/wirelesss16/
CS 393 Network Security. Nasir Memon Polytechnic University Module 12 SSL
CS 393 Network Security Nasir Memon Polytechnic University Module 12 SSL Course Logistics HW 4 due today. HW 5 will be posted later today. Due in a week. Group homework. DoD Scholarships? NSF Scholarships?
Secure Socket Layer. Security Threat Classifications
Secure Socket Layer 1 Security Threat Classifications One way to classify Web security threats in terms of the type of the threat: Passive threats Active threats Another way to classify Web security threats
Network Security: WLAN Security. Tuomas Aura T Network security Aalto University, Nov-Dec 2012
Network Security: WLAN Security Tuomas Aura T-110.5241 Network security Aalto University, Nov-Dec 2012 Outline Wireless LAN technology Threats against WLANs Weak security mechanisms and historical WEP
CS 356 Internet Security Protocols. Fall 2013
CS 356 Internet Security Protocols Fall 2013 Review Chapter 1: Basic Concepts and Terminology Chapter 2: Basic Cryptographic Tools Chapter 3 User Authentication Chapter 4 Access Control Lists Chapter 5
The following chart provides the breakdown of exam as to the weight of each section of the exam.
Introduction The CWSP-205 exam, covering the 2015 objectives, will certify that the successful candidate understands the security weaknesses inherent in WLANs, the solutions available to address those
IEEE C802.16e-03/71r2. IEEE Broadband Wireless Access Working Group <
Project IEEE 802.16 Broadband Wireless Access Working Group Title Enhancement of 802.16e to Support -based Authentication / Key Distribution Rev. 2 Date Submitted Source(s) 2003-12-29
FAQ on Cisco Aironet Wireless Security
FAQ on Cisco Aironet Wireless Security Document ID: 68583 Contents Introduction General FAQ Troubleshooting and Design FAQ Related Information Introduction This document provides information on the most
This version of the des Secure Enterprise MAC Client can be used on Mac OS X 10.7 Lion platform.
NCP Secure Enterprise MAC Client Service Release 2.02 Build 11 Date: August 2011 1. New Feature Compatibility to Mac OS X 10.7 Lion This version of the des Secure Enterprise MAC Client can be used on Mac
Network Systems. Bibliography. Outline. General principles about Radius server. Radius Protocol
Bibliography General principles about Radius server Bibliography Network System Radius Protocol Claude Duvallet University of Le Havre Faculty of Sciences and Technology 25 rue Philippe Lebon - BP 540
Wireless Security Security problems in Wireless Networks
Wireless Security Security problems in Wireless Networks Security of Wireless Networks Wireless networks are everywhere more and more electronic devices are becoming wireless However, ensuring security
Designing Smartcards for Emerging Wireless Networks
Designing Smartcards for Emerging Wireless Networks Pascal Urien 1 and Mesmin Dandjinou 2 1 ENST 37/39 rue Dareau, Paris 75014, France 2 Université Polytechnique de Bobo-Dioulasso, Burkina Faso Pascal.Urien@enst.fr
05 - WLAN Encryption and Data Integrity Protocols
05 - WLAN Encryption and Data Integrity Protocols Introduction 802.11i adds new encryption and data integrity methods. includes encryption algorithms to protect the data, cryptographic integrity checks
Chapter 4: Securing TCP connections
Managing and Securing Computer Networks Guy Leduc Chapter 5: Securing TCP connections Computer Networking: A Top Down Approach, 6 th edition. Jim Kurose, Keith Ross Addison-Wesley, March 2012. (section
Wireless Security i. Lars Strand lars (at) unik no June 2004
Wireless Security - 802.11i Lars Strand lars (at) unik no June 2004 802.11 Working Group 11 of IEEE 802 'Task Groups' within the WG enhance portions of the standard: 802.11 1997: The IEEE standard for
Internet security and privacy
Internet security and privacy SSL/TLS 1 Application layer App. TCP/UDP IP L2 L1 2 Application layer App. SSL/TLS TCP/UDP IP L2 L1 3 History of SSL/TLS Originally, SSL Secure Socket Layer, was developed
Wireless Network Security
Wireless Network Security Wireless LAN Security Slide from 2 nd book 1 802.11 Wireless LAN Security Stations in LAN are connected physically while in WLAN any station in the radio range is connected, so
Light Mesh AP. User s Guide. 2009/2/20 v1.0 draft
Light Mesh AP User s Guide 2009/2/20 v1.0 draft i FCC Certifications This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules.
Release Notes. NCP Secure Enterprise Mac Client. 1. New Features and Enhancements. 2. Improvements / Problems Resolved. 3.
NCP Secure Enterprise Mac Client Service Release 2.05 Build 14711 Date: December 2013 Prerequisites Apple OS X Operating System: The following Apple OS X operating system versions are supported with this
MTAT Applied Cryptography
MTAT.07.017 Applied Cryptography Transport Layer Security (TLS) University of Tartu Spring 2017 1 / 22 Transport Layer Security TLS is cryptographic protocol that provides communication security over the
Wireless technology Principles of Security
Wireless technology Principles of Security 1 Wireless technologies 2 Overview This module provides an introduction to the rapidly evolving technology of wireless LANs (WLANs). WLANs redefine the way the
802.1x. ACSAC 2002 Las Vegas
802.1x ACSAC 2002 Las Vegas Jeff.Hayes@alcatel.com 802.1 Projects The IEEE 802.1 Working Group is chartered to concern itself with and develop standards and recommended practices in the following areas:
AIR-WLC K9 Datasheet. Overview. Check its price: Click Here. Quick Specs
AIR-WLC4402-12-K9 Datasheet Check its price: Click Here Overview Cisco 4400 Series Wireless LAN Controller provides systemwide wireless LAN functions for medium to large-sized facilities. By automating
Chapter 17. Wireless Network Security
Chapter 17 Wireless Network Security IEEE 802.11 IEEE 802 committee for LAN standards IEEE 802.11 formed in 1990 s, to develop a protocol & transmission specifications for wireless LANs (WLANs) Demand
Lab Configuring LEAP/EAP using Cisco Secure ACS (OPTIONAL)
Lab 8.4.5.2 Configuring LEAP/EAP using Cisco Secure ACS (OPTIONAL) Estimated Time: 60 minutes Number of Team Members: Students can work in teams of two. Objective In this lab, the student will learn about
The World Wide Web is widely used by businesses, government agencies, and many individuals. But the Internet and the Web are extremely vulnerable to
1 The World Wide Web is widely used by businesses, government agencies, and many individuals. But the Internet and the Web are extremely vulnerable to compromises of various sorts, with a range of threats
Agile Controller-Campus V100R002C10. Permission Control Technical White Paper. Issue 01. Date HUAWEI TECHNOLOGIES CO., LTD.
V100R002C10 Permission Control Technical White Paper Issue 01 Date 2016-04-15 HUAWEI TECHNOLOGIES CO., LTD. 2016. All rights reserved. No part of this document may be reproduced or transmitted in any form
Configuring a VAP on the WAP351, WAP131, and WAP371
Article ID: 5072 Configuring a VAP on the WAP351, WAP131, and WAP371 Objective Virtual Access Points (VAPs) segment the wireless LAN into multiple broadcast domains that are the wireless equivalent of
Wireless Network Security Spring 2015
Wireless Network Security Spring 2015 Patrick Tague Class #7 More WiFi Security 2015 Patrick Tague 1 Class #7 Continuation of WiFi security 2015 Patrick Tague 2 Device Private WiFi Networks AP Local AAA
COSC4377. Chapter 8 roadmap
Lecture 28 Chapter 8 roadmap 8.1 What is network security? 8.2 Principles of cryptography 8.3 Message integrity 8.4 Securing e mail 8.5 Securing TCP connections: SSL 8.6 Network layer security: IPsec 8.7
CS-435 spring semester Network Technology & Programming Laboratory. Stefanos Papadakis & Manolis Spanakis
CS-435 spring semester 2016 Network Technology & Programming Laboratory University of Crete Computer Science Department Stefanos Papadakis & Manolis Spanakis CS-435 Lecture preview 802.11 Security IEEE
Data Sheet. NCP Secure Enterprise macos Client. Next Generation Network Access Technology
Universal, centrally managed VPN Client Suite for macos/os X Central Management and Network Access Control Compatible with VPN Gateways (IPsec Standard) Integrated, dynamic Personal Firewall VPN Path Finder
Wireless Security. Comp Sci 3600 Security. Attacks WEP WPA/WPA2. Authentication Encryption Vulnerabilities
Wireless Security Comp Sci 3600 Security Outline 1 2 3 Wired versus wireless Endpoint Access point Figure 24.1 Wireless Networking Components Locations and types of attack Outline 1 2 3 Wired Equivalent
Network Security: WLAN Security. Tuomas Aura T Network security Aalto University, Nov-Dec 2014
Network Security: WLAN Security Tuomas Aura T-110.5241 Network security Aalto University, Nov-Dec 2014 Outline Wireless LAN technology Threats against WLANs (Weak security mechanisms and historical WEP)
Exam HP2-Z32 Implementing HP MSM Wireless Networks Version: 7.1 [ Total Questions: 115 ]
![Exam HP2-Z32 Implementing HP MSM Wireless Networks Version: 7.1 [ Total Questions: 115 ]](/thumbs/89/97686506.jpg "Exam HP2-Z32 Implementing HP MSM Wireless Networks Version: 7.1 [ Total Questions: 115 ]")
s@lm@n HP Exam HP2-Z32 Implementing HP MSM Wireless Networks Version: 7.1 [ Total Questions: 115 ] HP HP2-Z32 : Practice Test Question No : 1 What is a proper use for an ingress VLAN in an HP MSM VSC?
Security Setup CHAPTER
CHAPTER 8 This chapter describes how to set up your bridge s security features. This chapter contains the following sections: Security Overview, page 8-2 Setting Up WEP, page 8-7 Enabling Additional WEP
Configuring the Client Adapter through Windows CE.NET
APPENDIX E Configuring the Client Adapter through Windows CE.NET This appendix explains how to configure and use the client adapter with Windows CE.NET. The following topics are covered in this appendix:
Configuring the WMIC for the First Time
Configuring the WMIC for the First Time This document describes how to configure basic settings on a Cisco Wireless Mobile Interface Card (WMIC) for the first time. Before You Start Before you install
CUA-854 Wireless-G Long Range USB Adapter with Antenna. User s Guide
CUA-854 Wireless-G Long Range USB Adapter with Antenna User s Guide Table of Contents Chapter 1. Introduction...5 1.1. About CUA-854...5 1.2. Key Features...5 1.3. Package Included...5 Chapter 2. Connect
The Xirrus Wi Fi Array XS4, XS8 Security Policy Document Version 1.0. Xirrus, Inc.
The Xirrus Wi Fi Array XS4, XS8 Security Policy Document Version 1.0 Xirrus, Inc. March 8, 2011 Copyright Xirrus, Inc. 2011. May be reproduced only in its original entirety [without revision]. Page 1 TABLE
Release Notes. NCP Secure Enterprise Mac Client. 1. New Features and Enhancements. 2. Improvements / Problems Resolved. 3.
NCP Secure Enterprise Mac Client Service Release 2.05 Rev. 32317 Date: January 2017 Prerequisites Apple OS X Operating System: The following Apple OS X operating system versions are supported with this
Procedure: You can find the problem sheet on the Desktop of the lab PCs.
University of Jordan Faculty of Engineering & Technology Computer Engineering Department Computer Advance Networks Laboratory 907529 Lab.3 WLAN Security Objectives 1. Configure administrator accounts.
FIPS Security Policy for Cisco Aironet Lightweight AP1131, AP1142, AP1242, AP1252, AP1262, CAP3502e, and CAP3502i Wireless LAN Access Points
FIPS 140-2 Security Policy for Cisco Aironet Lightweight AP1131, AP1142, AP1242, AP1252, AP1262, CAP3502e, and CAP3502i Wireless LAN Access Points November 4, 2010 Version 2.2 Contents This security policy
MTAT Applied Cryptography
MTAT.07.017 Applied Cryptography Transport Layer Security (TLS) Advanced Features University of Tartu Spring 2016 1 / 16 Client Server Authenticated TLS ClientHello ServerHello, Certificate, ServerHelloDone
Computer Security 3e. Dieter Gollmann. Security.di.unimi.it/sicurezza1415/ Chapter 16: 1
Computer Security 3e Dieter Gollmann Security.di.unimi.it/sicurezza1415/ Chapter 16: 1 Chapter 16: Communications Security Chapter 16: 2 Agenda Threat model Secure tunnels Protocol design principles IPsec
New Windows build with WLAN access
New Windows build with WLAN access SecRep 24 17-18 May 2016 Ahmed Benallegue/Hassan El Ghouizy/Priyan Ariyansinghe ECMWF network_services@ecmwf.int ECMWF May 19, 2016 Introduction Drivers for the new WLAN
Configuring the Client Adapter
CHAPTER 5 This chapter explains how to configure profile parameters. The following topics are covered in this chapter: Overview, page 5-2 Setting General Parameters, page 5-3 Setting Advanced Parameters,
EFFICIENT MECHANISM FOR THE SETUP OF UE-INITIATED TUNNELS IN 3GPP-WLAN INTERWORKING. 1. Introduction
Trends in Mathematics Information Center for Mathematical Sciences Volume 8, Number 1, June, 2005, Pages 77 85 EFFICIENT MECHANISM FOR THE SETUP OF -INITIATED TUNNELS IN 3GPP-WLAN INTERWORKING SANG UK
GHz g. Wireless A+G. User Guide. Notebook Adapter. Dual-Band. Dual-Band WPC55AG a. A Division of Cisco Systems, Inc.
A Division of Cisco Systems, Inc. Dual-Band 5 GHz 802.11a + GHz 2.4 802.11g WIRELESS Dual-Band Wireless A+G Notebook Adapter User Guide Model No. WPC55AG Copyright and Trademarks Specifications are subject
Network Security 1. Module 7 Configure Trust and Identity at Layer 2
Network Security 1 Module 7 Configure Trust and Identity at Layer 2 1 Learning Objectives 7.1 Identity-Based Networking Services (IBNS) 7.2 Configuring 802.1x Port-Based Authentication 2 Module 7 Configure
A Configuration Protocol for Embedded Devices on Secure Wireless Networks
A Configuration Protocol for Embedded Devices on Secure Wireless Networks Larry Sanders lsanders@ittc.ku.edu 6 May 2003 Introduction Wi-Fi Alliance Formally Wireless Ethernet Compatibility Alliance (WECA)
Appendix E Wireless Networking Basics
Appendix E Wireless Networking Basics This chapter provides an overview of Wireless networking. Wireless Networking Overview The FWG114P v2 Wireless Firewall/Print Server conforms to the Institute of Electrical
Configuring L2TP over IPsec
CHAPTER 62 This chapter describes how to configure L2TP over IPsec on the ASA. This chapter includes the following topics: Information About L2TP over IPsec, page 62-1 Licensing Requirements for L2TP over
Wireless Network Security Spring 2016
Wireless Network Security Spring 2016 Patrick Tague Class #7 WiFi Security 1 Announcements Please do HW#2 in using the stable OMNET++ 4.6, not the beta version. Porting has proven difficult... Form project
Data Sheet. NCP Secure Entry Mac Client. Next Generation Network Access Technology
Universal VPN Client Suite for macos/os X Compatible with VPN Gateways (IPsec Standard) macos 10.13, 10.12, OS X 10.11, OS X 10.10 Import of third party configuration files Integrated, dynamic Personal
Add a Wireless Network to an Existing Wired Network using a Wireless Access Point (WAP)
Add a Wireless Network to an Existing Wired Network using a Wireless Access Point (WAP) Objective A Wireless Access Point (WAP) is a networking device that allows wireless-capable devices to connect to
Securing Wireless LANs with Certificate Services
1 Securing Wireless LANs with Certificate Services PHILIP HUYNH University of Colorado at Colorado Springs Abstract Wireless Local Access Network (WLAN) is used popularly in almost everywhere from the
11N Wireless USB Adapter User Guide
-- 1 -- Copyright Statement is the registered trademark of Shenzhen Tenda Technology Co., Ltd. All the products and product names mentioned herein are the trademarks or registered trademarks of their respective
A Secure Wireless LAN Access Technique for Home Network
A Secure Wireless LAN Access Technique for Home Network *Ju-A Lee, *Jae-Hyun Kim, **Jun-Hee Park, and **Kyung-Duk Moon *School of Electrical and Computer Engineering Ajou University, Suwon, Korea {gaia,
Expected Outcomes Able to design the network security for the entire network Able to develop and suggest the security plan and policy
CHAPTER 9 DEVELOPING NETWORK SECURITY STRATEGIES Expected Outcomes Able to design the network security for the entire network Able to develop and suggest the security plan and policy Network Security Design
WAP Security. Helsinki University of Technology S Security of Communication Protocols
WAP Security Helsinki University of Technology S-38.153 Security of Communication Protocols Mikko.Kerava@iki.fi 15.4.2003 Contents 1. Introduction to WAP 2. Wireless Transport Layer Security 3. Other WAP
Cryptography and Network Security
Cryptography and Network Security Spring 2012 http://users.abo.fi/ipetre/crypto/ Lecture 14: Folklore, Course summary, Exam requirements Ion Petre Department of IT, Åbo Akademi University 1 Folklore on
Network Security: TLS/SSL. Tuomas Aura T Network security Aalto University, Nov-Dec 2014
Network Security: TLS/SSL Tuomas Aura T-110.5241 Network security Aalto University, Nov-Dec 2014 Outline 1. Diffie-Hellman key exchange (recall from earlier) 2. Key exchange using public-key encryption
b/g/n 1T1R Wireless USB Adapter. User s Manual
802.11 b/g/n 1T1R Wireless USB Adapter User s Manual Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device,
802.11b+g Wireless LAN USB Adapter. User Manual
802.11b+g Wireless LAN USB Adapter User Manual REGULATORY STATEMENTS FCC Certification The United States Federal Communication Commission (FCC) and the Canadian Department of Communications have established
Mobile WiMAX Security
WHITE PAPER WHITE PAPER Makes Mobile WiMAX Simple Mobile WiMAX Security Glossary 3 Abstract 5 Introduction to Security in Wireless Networks 6 Data Link Layer Security 8 Authentication 8 Security Association
Wireless LAN, WLAN Security, and VPN
Wireless LAN, WLAN Security, and VPN 麟瑞科技台南辦事處技術經理張晃崚 WLAN & VPN FAQ What is WLAN?802.11a?802.11b?802.11g? Which standard (product) should we use? How to deploy WLAN? How to block intruders? How to authenticate
Radiator. EAP-SIM and EAP- AKA Support
June 16, 2008 Radiator Radiator EAP-SIM and EAP- AKA Support Copyright (C) 2003-2008 Open System Consultants Pty. Ltd. White paper discussing EAP-SIM and EAP- AKA authentication support for Radiator. For
Protected EAP (PEAP) Application Note
to users of Microsoft Windows 7: Cisco plug-in software modules such as EAP-FAST and PEAP are compatible with Windows 7. You do not need to upgrade these modules when you upgrade to Windows 7. This document
COSC 301 Network Management. Lecture 15: SSL/TLS and HTTPS
COSC 301 Network Management Lecture 15: SSL/TLS and HTTPS Zhiyi Huang Computer Science, University of Otago COSC301 Lecture 15: SSL/TLS and HTTPS 1 Today s Focus WWW WWW How to secure web applications?
Overview of Security
Overview of 802.11 Security Bingdong Li Present for CPE 601 2/9/2011 Sources: 1 Jesse Walker (Intel) & 2. WinLab 1 Agenda Introduction 802.11 Basic Security Mechanisms What s Wrong? Major Risks Recommendations
Securing a Wireless LAN
Securing a Wireless LAN This module describes how to apply strong wireless security mechanisms on a Cisco 800, 1800, 2800, or 3800 series integrated services router, hereafter referred to as an access
Network Working Group Requests for Commments: 2716 Category: Experimental October 1999
Network Working Group Requests for Commments: 2716 Category: Experimental B. Aboba D. Simon Microsoft October 1999 Status of this Memo PPP EAP TLS Authentication Protocol This memo defines an Experimental
EnGenius Quick Start Guide
T he operates seamlessly in the 2.4 GHz frequency spectrum supporting the 802.11b (2.4GHz, 11Mbps) and the newer, faster 802.11g (2.4GHz, 54Mbpswireless standard. High output power and high sensitivity
Radiator. EAP-SIM and EAP- AKA Support
September 12, 2011 Radiator Radiator EAP-SIM and EAP- AKA Support Copyright (C) 2003-2011 Open System Consultants Pty. Ltd. White paper discussing EAP-SIM and EAP- AKA authentication support for Radiator.