RE: 802.11i research papers

From: Rosado, Rafael (Rafael) (rarosado_at_lucent.com)
Date: 02/12/04

  • Next message: Gene LeDuc: "RE: SMB enumation in Win2000/03"
    To: Andy Blair <blai0015@umn.edu>, security-basics@securityfocus.com
    Date: Thu, 12 Feb 2004 12:34:16 -0700
    
    

    Andy,

    I also forgot to mention a nice little blurb on NetworkFusion about WEP and
    WPA - http://www.nwfusion.com/columnists/2004/0119wizards.html

    And there is always the whitepaper on 802.1X from the University of Maryland
    that discusses the vulnerabilities associated with the 802.1X model (address
    by the combination of WPA + TKIP + MIC + EAP - EAP/TLS, EAP-TTLS, PEAP,
    LEAP, etc.) - http://www.cs.umd.edu/~waa/1x.pdf

    Hope it helps!

    Rafael Rosado, CISSP, CISA
    IT Security Manager
    Lucent Technologies
    IT Infrastructure - Network Design
    2400 SW 145th Avenue
    Miramar, Florida 33027
    Office: 954-885-2176
    Facsimile: 954-885-3861
    Email: rarosado@lucent.com

    This electronic mail message contains information belonging to Lucent
    Technologies, which may be confidential and/or legal privileged. The
    information is intended only for the use of the individual or entity named
    above. If you are not the intended recipient, you are hereby notified that
    any disclosure, printing, copying, distribution, or the taking of any action
    in reliance on the contents of this electronically mailed information is
    strictly prohibited. If you receive this message in error, please
    immediately notify us by electronic mail and delete this message.

    -----Original Message-----
    From: Rosado, Rafael (Rafael)
    Sent: Thursday, February 12, 2004 2:25 PM
    To: 'Andy Blair'; security-basics@securityfocus.com
    Subject: RE: 802.11i research papers

    Andy,

    Visit the WiFi Alliance website. They have several whitepapers associated
    with WPA (Wifi Protected Access) which is the replacement to WEP (TKIP is
    the interim solution to WEP - dynamically assigned WEP keys, but 802.11i is
    the combination of WPA and AES encyrption).

    The WiFi Alliance website is -
    http://www.wi-fi.org/OpenSection/protected_access.asp?

    Good luck with your research!

    Rafael Rosado, CISSP, CISA
    IT Security Manager
    Lucent Technologies
    IT Infrastructure - Network Design
    2400 SW 145th Avenue
    Miramar, Florida 33027
    Office: 954-885-2176
    Facsimile: 954-885-3861
    Email: rarosado@lucent.com

    This electronic mail message contains information belonging to Lucent
    Technologies, which may be confidential and/or legal privileged. The
    information is intended only for the use of the individual or entity named
    above. If you are not the intended recipient, you are hereby notified that
    any disclosure, printing, copying, distribution, or the taking of any action
    in reliance on the contents of this electronically mailed information is
    strictly prohibited. If you receive this message in error, please
    immediately notify us by electronic mail and delete this message.

    -----Original Message-----
    From: Andy Blair [mailto:blai0015@umn.edu]
    Sent: Wednesday, February 11, 2004 1:40 PM
    To: security-basics@securityfocus.com
    Subject: 802.11i research papers

    I am doing a research project on 802.11i and am looking for good research
    papers on the subject. I have found it difficult to try and wade through
    white papers that are essentially advertisements to find any academic,
    informative papers.

    Specifically, I am looking at how 802.11i has addressed problems found in
    WEP and other security features that the protocol has implemented.

    If anyone knows of any good papers or of any websites that collect academic
    and research rather than propoganda papers, I would love to visit them. If
    you know of any other source of info on this topic it would be helpful as
    well.

    Thanks for the help!
    Andrew Blair

    ---------------------------------------------------------------------------
    Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

    Protect your network with the comprehensive security solution that
    integrates six applications for ease of use and lower TCO.

    Firewall - Virus protection - Spam protection - URL blocking - VPN
    - Wireless security.

    Download 30-day evaluation at:
    http://www.astaro.com/php/contact/securityfocus.php
    ----------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

    Protect your network with the comprehensive security solution that
    integrates six applications for ease of use and lower TCO.

    Firewall - Virus protection - Spam protection - URL blocking - VPN
    - Wireless security.

    Download 30-day evaluation at:
    http://www.astaro.com/php/contact/securityfocus.php
    ----------------------------------------------------------------------------


  • Next message: Gene LeDuc: "RE: SMB enumation in Win2000/03"

    Relevant Pages

    • CanSecWest/core04 Call For Papers
      ... Network Security Training Conference ... CanSecWest would like to announce the final selection of papers ... CanSecWest/core04 network security training conference. ...
      (Vuln-Dev)
    • [VulnWatch] CanSecWest/core04 Call For Papers
      ... Network Security Training Conference ... CanSecWest would like to announce the final selection of papers ... CanSecWest/core04 network security training conference. ...
      (VulnWatch)
    • [fw-wiz] CanSecWest/core04 Call For Papers
      ... Network Security Training Conference ... CanSecWest would like to announce the final selection of papers ... CanSecWest/core04 network security training conference. ...
      (Firewall-Wizards)
    • RE: Wireless Security for Home Users
      ... User 128-bit WEP if your equipment supports it. ... the casual wardrivers to pass you by; there's always an unencrypted network ... Use any vendor-specific security improvements available to you. ... I believe if you use a 3Com WAP and 3Com client cards, ...
      (Security-Basics)
    • CanSecWest/core04 Call For Papers
      ... Network Security Training Conference ... CanSecWest would like to announce the final selection of papers ... CanSecWest/core04 network security training conference. ...
      (NT-Bugtraq)