SECURITY IN WIRELESS LANS AND MANS
CONTENTS CHAPTER INTRODUCTION I AUTHENTICATION AND AUTHORIZATION IN WLANS CHAPTER AUTHENTICATION IN WLANS: AN OVERVIEW BASIC ENTITIES AND REQUIREMENTS IN WLANS ENTITIES AND FUNCTIONS IN A LAN AND WLAN GENERAL REQUIREMENTS IN WLAN SECURITY AUTHENTICATION MODELS FOR WLANS THE UNIVERSAL ACCESS METHOD THE 802 1X AUTHENTICATION FRAMEWORK THE 802 1X ENTITIES THE NOTION OF A PORT EAP, EAP OVER LAN, AND EAP OVER WIRELESS SUPPLICANT TO AS AUTHENTICATION PROTOCOLS THE RADIUS PROTOCOL RADIUS PACKETS OVERVIEW RADIUS AUTHENTICATION APPROACHES RADIUS VULNERABILITIES DEVICE AUTHENTICATION FOR NETWORK ELEMENTS THE ROGUE CABLE MODEM CASE: A PRECEDENT 802 1X AND DEVICE CERTI?CATES TOWARD A SOLUTION TO THE ROGUE AP PROBLEM TOWARD A SOLUTION FOR ROGUE NETWORK DEVICES POLICY-BASED DEVICE AUTHENTICATION IN 802 1X FURTHER A?ELD: 802 1X AND TRUSTED COMPUTING SUMMARY REFERENCES EAP, TLS, AND CERTI?CATES THE EXTENSIBLE AUTHENTICATION PROTOCOL OVERVIEW OF EAP PACKET FORMAT BASIC EAP EXCHANGE EAP PEERS, LAYERS, MULTIPLEXING, AND PASS-THROUGH SUMMARY OF EAP OVERVIEW OF TLS THE SSL STACK THE BASIC SSL HANDSHAKE CERTI?CATES IN SSL THE SSL RECORD LAYER SUMMARY OF SSL AND TLS AN OVERVIEW OF CERTI?CATES AND PKI CONCEPT OF PUBLIC-KEY CRYPTOSYSTEMS DIGITAL CERTI?CATES AND PKI ROLE OF CERTI?CATION AUTHORITY (CA) PRIVATE AND PUBLIC CAS THE X 509 FORMAT SUMMARY OF CERTI?CATES AND PKI EAP METHODS THE EAP-TLS METHOD SSL RECORDS OVER EAP THE EAP-TLS EXCHANGE SUMMARY OF EAP-TLS PEAP: EAP-OVER-TLS-OVER-EAP EAP METHODS OVER TLS: EAP-TLV THE TWO PHASES OF PEAP SUMMARY OF PEAP TUNNELED TLS (EAP-TTLS) OVERVIEW OF TTLS EXAMPLE OF A TTLS SESSION COMPARISON OF TTLS AND PEAP EAP-SIM BACKGROUND: THE SIM TRIPLET EAP-SIM OVERVIEW EXAMPLE OF AN EAP-SIM SESSION SECURITY ISSUES WITH SIM OVER 802 11 WLANS EAP-AKA EAP-FAST RADIUS SUPPORT FOR EAP II DATA PROTECTION IN WIRELESS LANS WEP THREAT MODEL THREAT MODEL ADDRESSED BY THE WEP DESIGN ENTITY AUTHENTICATION OPEN-SYSTEM AUTHENTICATION SHARED-KEY AUTHENTICATION WEP ENCAPSULATION AND DECAPSULATION WEP DESIGN REQUIREMENTS WEP SHARED SECRET KEYS WEP ENCAPSULATION WEP DECAPSULATION DESIGN FLAWS IN WEP LACK OF PROPER INTEGRITY PROTECTION LACK OF REPLAY PROTECTION LACK OF MUTUAL AUTHENTICATION AND KEY MANAGEMENT 802 11I SECURITY: RSNA 802 11I SECURITY GOALS ENFORCING AUTHORIZED ACCESS TO A WIRED NETWORK PROTECTION AGAINST DOWNGRADE ATTACKS DATA PROTECTION COMPONENTS OF AN RSNA SECURITY ASSOCIATIONS WITHIN AN RSNA RSN IE STEPS IN ESTABLISHING AN RSN ASSOCIATION MUTUAL AUTHENTICATION IN RSNAS 802 1X AND EAP-BASED AUTHENTICATION PMK CACHING PSK-BASED AUTHENTICATION PREAUTHENTICATION IN RSNS SA AND KEY MANAGEMENT IN RSNS 4-WAY HANDSHAKE SUMMARY OF THE SECURITY PROPERTIES OF THE 4-WAY EXCHANGE SECURITY ASSUMPTIONS INHERENT TO THE 4-WAY EXCHANGE PTK DERIVATION KEY DOWNLOAD PROTOCOLS IN 802 11I GROUP KEY EXCHANGE STAKEY EXCHANGE CCMP AES CCM MODE CCM PARAMETERS MIC COMPUTATION USING AES-CBC-MAC AES-CTR MODE ENCRYPTION IN CCM CCM DECAPSULATION SECURITY ANALYSIS OF THE CCM MODE VULNERABILITY TO PRECOMPUTATION ATTACKS 802 11I CCMP KEY DERIVATION FOR CCMP ADDITIONAL AUTHENTICATION DATA IN CCMP NONCE CONSTRUCTION IN CCMP REPLAY PROTECTION MPDU ENCAPSULATION AND DECAPSULATION TKIP TKIP DESIGN TKIP DESIGN GOALS AND CONSTRAINTS TKIP DESIGN COMPONENTS MESSAGE INTEGRITY PROTECTION USING MICHAEL MICHAEL PROTOCOL LIMITATIONS CON?DENTIALITY TKIP KEY MIXING SECURITY LIMITATIONS OF TKIP KEY MIXING TKIP ENCAPSULATION AND DECAPSULATION TKIP COUNTERMEASURES III WIRELESS ROAMING SECURITY SECURITY IN WIFI ROAMING ROAMING IN DIAL-UP IP SERVICES: BACKGROUND THE DIAL-UP ACCESS MODEL AUTHENTICATION IN DIAL-UP IP SERVICES THE NETWORK ACCESS IDENTI?ER (NAI) THE NAI FOR DIAL-UP REMOTE ACCESS WIFI ROAMING: ENTITIES AND MODELS WIFI ROAMING ENTITIES ROAMING MODELS WIFI ROAMING SECURITY REQUIREMENTS: A CLASSI?CATION WISPR: THE WIRELESS ISP ROAMING ARCHITECTURE HOTSPOT OPERATIONAL ASPECTS AAA SESSIONS IN WISPR ALTERNATIVE AUTHENTICATION METHODS IN WISPR CHAPTER 10 3G-WLAN ROAMING 10 1 INTRODUCTION 10 2 A BRIEF HISTORY OF GSM AND 3G 10 3 3G-WLAN INTERWORKING: THE 3GPP PERSPECTIVE 10 4 THE 3GPP-WLAN INTERWORKING ARCHITECTURE 10 4 1 3GPP-WLAN INTERWORKING: ENTITIES 10 4 2 3G-WLAN ROAMING: THE NAI 10 4 3 3G-WLAN ROAMING: SECURITY ISSUES AND REQUIREMENTS 10 5 SUMMARY IV WMAN SECURITY CHAPTER 11 AN OVERVIEW OF 802 16 WMANS 11 1 INTRODUCTION 11 2 BACKGROUND ON 802 16 WMANS 11 2 1 THE BASIC 802 16 NETWORK ARRANGEMENT 11 2 3 THE 802 16 PROTOCOL LAYERS 11 2 4 THE MAC SECURITY SUBLAYER 11 3 NETWORK ENTRY AND INITIALIZATION 11 4 THE PRIVACY KEY MANAGEMENT (PKM) PROTOCOL 11 4 1 BACKGROUND TO THE PKM PROTOCOL 11 4 2 AUTHORIZATION KEY ESTABLISHMENT 11 4 3 THE TEK EXCHANGES PHASE 11 4 4 KEY TRANSITIONS AND SYNCHRONIZATIONS 11 5 1 THE NEED FOR CERTI?CATES IN SUBSCRIBER DEVICES 11 5 2 THE CABLEHOME CERTI?CATE HIERARCHY 11 5 3 A CERTI?CATE HIERARCHY FOR THE WMAN INDUSTRY 11 6 SUMMARY CHAPTER 12 WIRELESS MAN SECURITY 12 1 INTRODUCTION 12 2 WMAN THREAT MODEL AND SECURITY REQUIREMENTS 12 2 1 ORIGINAL DESIGN OF THE 802 16 SECURITY SUBLAYER 12 3 1 MUTUAL AUTHENTICATION BETWEEN A BS AND AN MS 12 4 3 PKMV2 KEY HIERARCHY 12 4 4 TEK AND GTEK UPDATE 12 5 CCM ENCAPSULATION OF 802 16 MPDUS 12 5 1 NONCE CONSTRUCTION 12 6 SECURE ENCAPSULATION OF MULTICAST AND BROADCAST MPDUS 12 6 1 802 16 SECURITY ASSOCIATIONS 12 7 SECURITY ISSUES IN THE 802 16 SPECI?CATION 12 8 SUMMARY