Network World
Saturday, October 11, 2008
DNSstuff.com
Get information about your IP
IP Information
50+ On-demand DNS and network tools

Security

New resources | Add a resource | Top rated resources

Sub-categories


pop Wi-Foo: Wireless hacking tools

"Here is the list of tools we commonly use in 'pentesting' wireless networks or just wardriving for fun and no profit."

Hits: 3399
Rating: 6.29
Rate it
Comment on it


802.11 Security

Overview of 802.11 security issues. WirelessDev.Net, 05/23/02.

Hits: 546
Rating: 1.00
Rate it
Comment on it


802.11 security – the attacks explained

Mark Osborne explains just how wireless networks can be attacked and what the industry needs to develop to protect themselves: "This article plans to set out the major attacks that could be launched against an 802.11 LAN. It then uses the internet, a medium we all know and hopefully are fairly comfortable with, in a comparison that highlights threats that an organisation using the 802.11b networks would be exposed to. The final objective is to provide a benchmark that will allow people to define the effort and expenditure necessary on defining WLANs. All the attacks were actually conducted on a demonstration LAN by the author himself to prove that they were very feasible – We certainly don't need more theoretical attacks and conjecture in the security industry." In PDF

Hits: 292
Rating: 8.00
Rate it
Comment on it


802.11 Wireless Security in Business Networks

With the increasing deployment of 802.11 (Wi-Fi) wireless networks in business environments comes an increased focus on security. This paper begins with a discussion of the security control methods that form the basis of the original 802.11 architecture and explores several options, including the more robust virtual private network (VPN) alternative and the forthcoming 802.11i standard.

Hits: 376
Rating: 8.00
Rate it
Comment: (1)


802.11x's elusive security

"Problems, tips, and best bets: 802.11x architecture; Are security problems embedded in 802.11?; Other attacks; Top tips for securing wireless; Outlook for the future." From IBM developerWorks.

Hits: 245
Rate it
Comment on it


A Practical Approach to Identifying and Tracking Unauthorized 802.11 Cards and Access Points

"With proper care, it is possible to build a wireless network that is at least as secure as an equivalent wired network. However, it is still desirable to track attempts at unauthorized access and, perhaps more importantly, track potential breaches by internal, trusted users. The purpose of this paper is to propose techniques for detection and location of unauthorized wireless clients and rogue access points, and then to discuss the details of a practical approach using off-the-shelf components and free software." By Interlink Networks. In PDF.

Hits: 507
Rate it
Comment on it


A Survey of 802.11a Wireless Security

"This white paper first describes taxonomy of wireless LAN attack techniques. We then describe the generic mechanisms available for authentication of users and the protection of the privacy and integrity of the data. We conduct a basic analysis of each security countermeasure by looking at the attack techniques addressed by the mechanism. Our analysis takes into account the perspective of both insiders and outsiders. We conclude by stating our recommendations for WLANs." Paper by the U.S. Military Academy's Information Technology and Operations Center. In PDF.

Hits: 467
Rating: 1.00
Rate it
Comment on it


Best Practices for Wireless Network Security

"Wireless networks introduce a number of critical security risks and challenges, and it's important to implement strong security measures to mitigate these risks. What follows are potential risks and associated best practices to help you secure your network and understand WLAN characteristics."
Computerworld, 11/24/03.

Hits: 435
Rate it
Comment on it


bluejackQ

Claims to be the world's first Web site devoted to bluejacking, i.e., interacting with Bluetooth devices not right in your hands.

Hits: 266
Rate it
Comment on it


Building a wireless sniffer with Perl

"This article, the first in a two-part report, reviews common issues of wireless security, and shows how to use open source software to suss out wireless networks, get information about them, and start recognizing common security problems." From IBM.

Platform(s): Perl.

Hits: 923
Rating: 2.00
Rate it
Comment on it


Cisco Aironet Wireless LAN Security Overview

Cisco overview that summarizes key security issues for wireless LANs.

Hits: 294
Rate it
Comment on it


Closing the Door on Unwanted Guests: Keys to a Safe and Secure Wireless Network

Tips for implementing a secure wireless infrastructure by Chris O'Ferrell, Chief Technology Officer, NETSEC.

Hits: 275
Rating: 10.00
Rate it
Comment on it


Cryptography locks down WAP and P2P transmissions

"No matter what protocol or architecture you're using to broadcast data through the air, encryption can make that data safer. In this article, we'll examine some places where encryption can help secure wireless applications and networks, with a particular focus on WAP and P2P architectures. We'll also look at a J2ME application that uses cutting-edge cryptographical libraries to encode its data." From IBM developerWorks.

Hits: 138
Rate it
Comment on it


Debunking the Myth of SSID Hiding

"In IEEE 802.11 networks, the SSID (Service Set Identifier) is viewed by some security professionals as an unneeded advertisement of the wireless network to attackers and these professionals assert that all measures should be taken to 'hide' the SSID. But this advertisement is the essential role that SSIDs are designed to play. The broadcast of the SSID improves the performance of a wireless network and the SSID cannot be hidden without degrading proper WLAN operations. Efforts to hide the SSID are at best half-measures which lead to a false sense of security and to a degradation of wireless network performance, particularly in a roaming situation."

By Robert Moskowitz, Senior Technical Director, ICSA Labs.

Hits: 533
Rating: 9.25
Rate it
Comment on it


Exploiting Open Functionality in SMS-Capable Cellular Networks

"This research evaluates the security impact of the Short Messaging Service (SMS) interface on the availability of the cellular phone network. Specifically, we demonstrate the ability to deny voice service to large metropolitan areas with little more than a cable modem. Moreover, attacks targeting the entire United States are feasible with resources available to medium-sized zombie networks."

Hits: 25
Rating: 10.00
Rate it
Comment on it


Guidelines on PDA Forensics (draft)

NIST draft: "The document was developed to help organizations evolve appropriate policies and procedures for dealing with PDA forensics and to provide forensic specialists with a background on the technology, tools, and principles involved. The intended audience ranges from response team members handling a computer security incident to organizational security officials investigating an employee-related situation to forensic examiners involved in criminal investigations." In PDF.

Hits: 55
Rate it
Comment on it


Identifying Rogue Access Points

"Within a properly secured WLAN, rogue access points are more damaging than rogue users. Unauthorized users trying to access a WLAN likely will not be successful at reaching valuable corporate resources if effective authentication mechanisms are in place." 802.11-Planet.com

Hits: 282
Rating: 10.00
Rate it
Comment on it


Making the WPA Upgrade

"Now that Wi-Fi Protected Access is arriving in an 802.11 product installed near you, the big questions come up, such as: How do you actually use it? And is it worth upgrading to it in the long run?" 802.11 Planet, 05/03/03.

Hits: 145
Rate it
Comment on it


Man-In-The-Middle Attack Using Bluetooth In A WLAN Interworking Environnment

"A Bluetooth link between peripheral devices does not require integrity protection/validation. This in turn opens the door for a man-in-the-middle type of attack on the Bluetooth link in a WLAN internetworking environment - by luring the victim to connect to a malicious WLAN access point the attacker is not required to know the Bluetooth link key. The attacker can repeat this attack on the same victim many times in any WLAN network." From SecuriTeam.com.

Hits: 294
Rate it
Comment on it


NoCatAuth

Open-source authentication system for wireless networks, consisting of a MySQL-based authentication server and gateway software on each client in the network.

Platform(s): Linux, Unix.

Hits: 32
Rate it
Comment on it


RFID Viruses and Worms

Papers on" RFID Malware: RFID exploits, RFID worms, and RFID viruses."

Hits: 152
Rate it
Comment on it


Risk Management of Wireless Networks

"This advisory letter highlights risks associated with wireless networks and provides guidance for managing those risks. National banks can use this guidance to help in protecting company assets and confidential customer information, achieving service level requirements, maintaining safe and sound practices, and ensuring compliance with regulatory security expectations." From BankInfoSecurity.com.

Hits: 314
Rating: 10.00
Rate it
Comment on it


Securing 802.11 Wireless LANs

"This white paper provides a high level overview of security planning in general and addresses specific security threats for 802.11 wireless networks." By Wavelink. Free registration required.

Hits: 315
Rate it
Comment on it


Securing Wireless LANs

"This paper goes through the common security threats and considerations present in today's wireless Ethernet technologies, what wireless security technologies (802.1X and WEP) can provide and where they fall short." NetScreen white paper. Requires free registration.

Hits: 312
Rate it
Comment on it


Securing Wireless LANs with PEAP and Passwords

"This solution guide shows you how to plan, deploy, and manage 802.1X wireless LAN security using Microsoft Windows Server 2003. This guidance provides step-by-step instructions for deploying wireless local access network (LAN) security for Microsoft Windows XP, and Pocket PC clients using the Protected Extensible Authentication Protocol (PEAP) and password authentication." By Microsoft.

Hits: 516
Rate it
Comment on it


Ten easy steps for wireless security

Netgear white paper. In PDF.

Hits: 298
Rate it
Comment on it


Understanding Wireless LAN Vulnerabilities

Webtorials.com white paper. Requires free registration.

Hits: 175
Rate it
Comment on it


Wi-Fi Protected Access

Overviews of Wi-Fi Protected Access, a new industry-backed standard that corrects several key weaknesses in the 802.11 encryption scheme known as WEP. The WPA standard is an early version of the work nearing completion in the IEEE 802.11i working group.

Hits: 243
Rate it
Comment on it


Wireless Access Security Issues

Collection of papers from the SANS Institute.

Hits: 211
Rate it
Comment on it


Wireless LAN Security Technology Overview

"This paper presents key security concepts, some WLAN attack methods hackers may use, as well as security concepts and mechanisms that can be used to protect against hackers. In addition, one section discusses what security controls to use in a variety of user situations." Netgear white paper. In PDF.

Hits: 244
Rating: 10.00
Rate it
Comment on it


Wireless Network Security: 802.11, Bluetooth, and Handheld Devices

"This document provides an overview of wireless networking technologies and wireless handheld devices most commonly used in an office environment and with today's mobile workforce. This document seeks to assist agencies in reducing the risks associated with 802.11 wireless local area networks (LAN), Bluetooth wireless networks, and handheld devices." By the National Institute of Standards and Technology. In PDF.

Hits: 342
Rate it
Comment on it


Wireless Vulnerabilities and Exploits

"WVE is the source for in-depth information on wireless vulnerabilities. It provides a standardized nomenclature for Vulnerabilities in wireless protocols and products, and the Exploits which take advantage of these vulnerabilities. It is also a database or catalog of these vulnerabilties and exploits."

Hits: 337
Rate it
Comment on it


WPA plugs holes in WEP

New wireless security standard could drive hot spot, academic installations. Network World, 03/31/03.

Hits: 212
Rate it
Comment on it


Page updated on: Thu Nov 09 2006 - 14:17:12


Network World Newsletter

Sign up for some of our Wireless & Mobile newsletters.

Wireless Alert
Cool Tools alert
Network World Daily
 All newsletters  

E-mail Address: