How we did it

We used the P5-200 MMX as a file server and the Sony VAIO laptop as our wireless client. We employed Novosoft's Handy Backup 2.1 to synchronize two 1.1G-byte folders containing numerous subfolders and files between the client and the server (this generated the requisite network traffic to fill about 50 minutes back-up time, simulating the network traffic required by WEPCrack). The Pentium III 800-MHz with a LinkSys WPC-11 was our "cracking machine," on which we ran Ethereal for Windows, Perl Builder and WEPCrack. After cracking was complete, we switched to WildPacket's Airopeek with a Cisco Aironet 340 PCI network interface card (NIC) to surf the hacked network. Both the P5-200 MMX and the Pentium III 800-MHz were outfitted with a PCI slot to PC Card adapter for use with the PC card wireless NICs.

All four products provided full 802.11b 128-bit Wired Equivalent Privacy (WEP), as well as their own proprietary security enhancements (encryption and authentication).

For each test, we used proprietary wireless NICs in the laptop and the file server, running them first in their open mode (no WEP) to ensure throughput, then using 128-bit static WEP to test configuration and compliance, and finally in their proprietary security modes. We also tested each product for features, ease of installation, use, administration, and documentation. Because the ease of cracking 128-bit WEP is well known, we only conducted security testing against each product in its proprietary security mode, running the hacking test for 48 hours. If WEPCrack was unable to make any progress within 48 hours, we considered the product to be secure.

Back to the main review