Download Ebook Real 802.11 Security: Wi-Fi Protected Access and 802.11i, by Jon Edney, William A. Arbaugh
Your impression of this publication Real 802.11 Security: Wi-Fi Protected Access And 802.11i, By Jon Edney, William A. Arbaugh will certainly lead you to acquire what you precisely need. As one of the inspiring books, this book will certainly offer the presence of this leaded Real 802.11 Security: Wi-Fi Protected Access And 802.11i, By Jon Edney, William A. Arbaugh to gather. Even it is juts soft documents; it can be your cumulative documents in gizmo and other device. The crucial is that use this soft file publication Real 802.11 Security: Wi-Fi Protected Access And 802.11i, By Jon Edney, William A. Arbaugh to read and take the perks. It is just what we suggest as publication Real 802.11 Security: Wi-Fi Protected Access And 802.11i, By Jon Edney, William A. Arbaugh will certainly boost your thoughts as well as mind. After that, checking out book will certainly additionally improve your life quality better by taking excellent activity in balanced.
Real 802.11 Security: Wi-Fi Protected Access and 802.11i, by Jon Edney, William A. Arbaugh
Download Ebook Real 802.11 Security: Wi-Fi Protected Access and 802.11i, by Jon Edney, William A. Arbaugh
Do you assume that reading is an essential activity? Find your factors why including is very important. Checking out a publication Real 802.11 Security: Wi-Fi Protected Access And 802.11i, By Jon Edney, William A. Arbaugh is one component of enjoyable activities that will make your life quality better. It is not regarding just exactly what sort of e-book Real 802.11 Security: Wi-Fi Protected Access And 802.11i, By Jon Edney, William A. Arbaugh you check out, it is not only regarding the number of publications you review, it's concerning the behavior. Reading practice will be a way to make publication Real 802.11 Security: Wi-Fi Protected Access And 802.11i, By Jon Edney, William A. Arbaugh as her or his good friend. It will certainly regardless of if they invest money as well as invest more books to finish reading, so does this publication Real 802.11 Security: Wi-Fi Protected Access And 802.11i, By Jon Edney, William A. Arbaugh
As one of the home window to open the brand-new globe, this Real 802.11 Security: Wi-Fi Protected Access And 802.11i, By Jon Edney, William A. Arbaugh supplies its remarkable writing from the author. Released in one of the preferred authors, this publication Real 802.11 Security: Wi-Fi Protected Access And 802.11i, By Jon Edney, William A. Arbaugh turneds into one of the most wanted books just recently. Actually, the book will not matter if that Real 802.11 Security: Wi-Fi Protected Access And 802.11i, By Jon Edney, William A. Arbaugh is a best seller or otherwise. Every book will certainly still give finest sources to obtain the visitor all finest.
However, some individuals will certainly seek for the best vendor book to read as the first recommendation. This is why; this Real 802.11 Security: Wi-Fi Protected Access And 802.11i, By Jon Edney, William A. Arbaugh is presented to satisfy your necessity. Some people like reading this publication Real 802.11 Security: Wi-Fi Protected Access And 802.11i, By Jon Edney, William A. Arbaugh as a result of this prominent book, but some love this because of preferred writer. Or, numerous additionally like reading this book Real 802.11 Security: Wi-Fi Protected Access And 802.11i, By Jon Edney, William A. Arbaugh since they actually have to read this book. It can be the one that really love reading.
In getting this Real 802.11 Security: Wi-Fi Protected Access And 802.11i, By Jon Edney, William A. Arbaugh, you may not constantly pass strolling or riding your motors to the book establishments. Obtain the queuing, under the rain or hot light, and also still search for the unknown book to be in that publication establishment. By seeing this web page, you can only look for the Real 802.11 Security: Wi-Fi Protected Access And 802.11i, By Jon Edney, William A. Arbaugh and also you can discover it. So currently, this moment is for you to go for the download link as well as purchase Real 802.11 Security: Wi-Fi Protected Access And 802.11i, By Jon Edney, William A. Arbaugh as your very own soft documents publication. You can read this book Real 802.11 Security: Wi-Fi Protected Access And 802.11i, By Jon Edney, William A. Arbaugh in soft data only as well as save it as yours. So, you do not have to fast place the book Real 802.11 Security: Wi-Fi Protected Access And 802.11i, By Jon Edney, William A. Arbaugh right into your bag almost everywhere.
Providing descriptions of security techniques, this title presents significant clarification of IEEE draft standards.
- Sales Rank: #1469152 in Books
- Published on: 2003-07-25
- Original language: English
- Number of items: 1
- Dimensions: 9.13" h x 1.10" w x 6.93" l, 1.53 pounds
- Binding: Paperback
- 480 pages
From the Back Cover
" Real 802.11 Security provides clear descriptions of current and emerging security techniques. The authors handle complex topics nicely, and offer significant clarification of IEEE draft standards."
--Russ Housley, IETF Security Area Director and founder of Vigil Security, LLC
"This is certainly the definitive text on the internals of 802.11 security!"
--John Viega, founder and chief scientist, Secure Software, Inc.
"This book keeps the exposition as straightforward as possible and enables you to cut through the maze of acronyms, hacking tools, rumored weaknesses, and vague vendor security claims to make educated security decisions when purchasing or deploying WLAN."
--Simon Blake-Wilson, Director of Information Security, BCI
Business professionals and advanced home users are captivated by the convenience of working on wireless networks. But how can privacy and security be maintained effectively? Real 802.11 Security describes an entirely new approach to wireless LAN security based on the latest developments in Wi-Fi technology. This is the book that will show you how to establish real security within your Wi-Fi LAN.
Recent developments in Wi-Fi security achieve what no amount of reconfiguration can do: They solve the problem at the source. Wi-Fi Protected Access (WPA) repairs weaknesses in existing Wi-Fi systems and is designed to allow software upgrades. The upcoming 802.11i standard will offer a much higher level of security than previously offered and will provide flexible, extremely secure solutions for future products.
Real 802.11 Security addresses the theory, implementations, and reality of Wi-Fi security. It provides an overview of security issues, explains how security works in Wi-Fi networks, and explores various security and authentication protocols. The book concludes with an in-depth discussion of real-world security issues and attack tools.
Written by two experts in wireless security, Jon Edney and William Arbaugh, this book shows you how to stay informed and aware when making security decisions, and what steps you can take to implement the most effective, proactive wireless security now and in the future.
0321136209B06242003
About the Author
Jon Edney specializes in wireless networking and is a key contributor to the development of IEEE 802.11 systems. As a member of the technology consultancy Symbionics Networks, he deployed the first low-cost 802.11 designs. In 1996, Edney cofounded InTalk, Inc., the first IEEE 802.11 company to develop WLAN access points. After InTalk was acquired by Nokia Corporation, he focused on the application of Wi-Fi to public access networks. He is an active member of the IEEE 802.11 TGi security group.
William A. Arbaugh is an assistant professor of computer science at the University of Maryland in College Park, where he conducts research in information systems security. Arbaugh served as a senior computer scientist for the National Security Agency's Office of Research and Technology, and then as senior technical advisor for the Office of Advanced Network Programs. He has many publications to his credit and has delivered papers at security-related conferences such as IEEE, SANS, USENIX, and Comdex.
0321136209AB06242003
Excerpt. © Reprinted by permission. All rights reserved.
Why This Book Now?
Ask anyone with a computer whether they want to be protected against strangers reading their data or planting viruses. Not really worth the effort, is it? Everyone wants this type of protection. However, most Wi-Fi wireless LANs operating in 2003 have no effective security. In fact, so many Wi-Fi LANs operate without security that an entire new hobby, "war driving," has sprung up in which folks drive around detecting and connecting to unsuspecting networks for fun. There are Web sites that publish the location and details of unprotected networks that are found--there are bound to be some near you! This problem is the result of people being unaware of the danger, but you are different, right?
The fact that you are reading this preface means that you are aware of the need to take active steps to implement security. Already, you may have implemented some security approach, perhaps as recommended by the supplier of the equipment you installed. Would that this were enough. The horrible truth is that the security systems shipped with Wi-Fi systems over the period from 1999 to 2002 are completely inadequate, some would say completely broken. Any computer-literate person can now download from the Internet tools that will attack and break into the first-generation Wi-Fi systems.
This book will show you how to tip the balance back in your favor--how to establish real security within your Wi-Fi LAN. It is not just about configuring your computer correctly or choosing good passwords, although these things are important. There are many books that focus on "parameter setting." What we describe in this book is a whole new approach to wireless LAN security enabled by the recent development of new core technology for Wi-Fi. The new developments achieve what no amount of reconfiguration can do: they solve the problem at the source. In this book we show how the new approaches work and how they should be applied to maximum effect. Whether you are a system administrator or an advanced home user, this book will open your eyes to current weaknesses and practical, implementable solutions.
To Wi-Fi or Not to Wi-Fi
For many years, Wi-Fi or IEEE 802.11 wireless LANs were considered an interesting technology but not mainstream. This has changed. Now ordinary people and companies, not just technology addicts and experimenters in IT departments, see the practical benefits of this technology. There are two categories of users: business and home. Corporations set up Wi-Fi LANs to allow rapid network deployment, to reduce the cost of installing wiring, and to give workers more flexibility in where and when they work. Home users also want to avoid installing wiring and like the ability to use a laptop on the couch or in a comfy chair outside.
System administrators have a big problem when it comes to Wi-Fi LANs. On the one hand they recognize the benefits of wireless both for their own configuration management and for users. On the other hand, they must not deploy anything that will be a serious security threat. We say "serious" because there is always some security risk in any technology deployment. The only truly secure network is no network. So system administrators have to choose between banning Wi-Fi networks or figuring out how to obtain the needed level of security. Experienced system administrators recognize that any new system component brings both benefits and risks. The problem with Wi-Fi up to now has been how to evaluate the risk.
The Cavalry Is Here
In 2001 those few who deployed security often relied on the original Wi-Fi security method, called WEP. Regrettably, and quite suddenly, it was discovered that WEP had major security flaws and, while arguably better than nothing, customers were left without effective protection. The result, in 2002, was an unparalleled effort on the part of the industry to devise a replacement for WEP, something that would be impregnable, but which could be used to upgrade the existing installed systems. In 2003 we see the results of this effort being deployed.
The new solutions for Wi-Fi security are being delivered in two installments. The first installment is called Wi-Fi Protected Access (WPA), announced by the Wi-Fi Alliance at the end of 2002. WPA has been specifically designed to allow software upgrade of most existing Wi-Fi systems. It repairs all the security weaknesses found in older Wi-Fi systems and has been developed to provide system administrators with a solution to the security dilemma.
In time WPA will be incorporated into a new version of the IEEE 802.11 standard (IEEE 802.11i) that is incomplete at the time of writing. This will provide a flexible and extremely secure solution for all future products. WPA offers levels of security much higher than previously available. The failure of WEP was a sharp wake-up call for the industry and the prevailing mood during 2002 was "we will never let this happen again." As a result, the best experts have participated in creating the new solution and the results have been reviewed worldwide prior to completion.
Naturally, change brings questions:
"Should I implement WPA now rather than wait for IEEE 802.11i?" "What do I do with my existing WEP equipment/Can I upgrade it?" "Is it now safe to put Wi-Fi inside the firewall?"
These are the types of questions that this book answers. We could answer them right here: "yes," "yes," "yes," but our goal in writing is to ensure that you understand enough about the mechanics to answer these questions for yourself.
In this book we look at security issues, protocols, and applications. An overview covers all the important protocols from IEEE 802.11 and IEEE 802.1X through to authentication protocols such as RADIUS and EAP. We cover the security protocols of WPA and IEEE 802.11i in detail. We also look at the real-world tools that have been used to attack Wi-Fi systems and you will learn why these will no longer be a threat.
Audience
This book is written principally for system administrators but will also be useful to technically oriented home users and design engineers. It focuses on why the new Wi-Fi security methods are secure and how they work. You will finish with an understanding of Wi-Fi security so you will know what you are doing, and why. The book does not flood you with pages of installation and configuration instructions for specific vendor equipment, as that information changes frequently and becomes obsolete. You should use this book alongside vendor documentation to create customized security solutions.
System administrators have been badly burned in the past by assurances that Wi-Fi LANs had effective built in security, assurances that did not hold true over time. We feel that administrators will not want to take at face value statements like "the new WPA and IEEE 802.11i methods are completely secure." They should be able to see for themselves how the security methods are implemented and understand for themselves why the types of weakness that existed previously have been overcome. Only when this trust is reestablished can administrators continue deployment in comfort. This book attempts to provide all the information needed for this understanding.
If you are a design engineer in any networking field, wireless or otherwise, you will find this book relevant. The security technologies incorporated into WPA and IEEE 802.11i are the state of the art for data networking, and it is much easier to learn and understand technology when it is described in the context of a real system. It seems likely that some of the techniques incorporated into the wireless LAN area will also be applied to wired LANs in the future.
If you are just generally interested in the area, you will find lots of material describing the approach to security that is needed to provide a robust defense. You may choose to skip some of the chapters that describe the protocol and you will probably be surprised to see the real examples of hacking tools presented in the later chapters.
We assume that you have a reasonable understanding of how computer networks operate. You don't need to be an expert, especially to understand the first part of the book, but we presume you know what a Wi-Fi access point does and how it is connected to the rest of the network. We don't explain terms like Ethernet or TCP/IP in detail. There is a primer on IEEE 802.11 if you are not familiar with the protocol used to communicate over the air.
Organization
This book is organized into three parts. Roughly speaking, these parts describe:
- Things you should know about security in general
- How both the old and new methods of security work in Wi-Fi networks
- Real-world issues and examples of attack tools that have been (and continue to be) used
In Part I, "What Everyone Should Know," we review issues that everybody should know about security. Some of these issues are commonsense, but you may not have thought about them. If you are already a security expert and exploring how security works for Wi-Fi, consider skimming this material because many of the principles will be familiar.
Part II, "The Design of Wi-Fi Security," starts with a primer on IEEE 802.11 that runs through the basics of Wi-Fi systems communication. It describes the types of messages that are exchanged, usually hidden from the end user, and explains how a portable device like a laptop can find, select, and connect to an access point. The primer contains a moderate, but hopefully not oppressive, amount of detail. You need to understand the messages being sent between the Wi-Fi components to appreciate the security risks.
After the primer, the book delves into the security protocols for Wi-Fi. It describes the original Wi-Fi security approach, WEP, and explains why this method is no longer considered secure. It then covers the new approaches of Wi-Fi Protected Access (WPA) and IEEE 802.11i Robust Security Networks. Both the new methods share a common approach and are scalable from small networks of a few devices up to international corporations. The solution involves many pieces assembled in layers. This makes the approach appear complicated but, if you take one layer at a time, you can understand each part separately.
Part III, " Wi-Fi Security in the Real World," returns to practical issues. We start off with a review of security in hotspots or public access networks. Such network access is becoming increasingly popular in Internet cafes and airports; and hotspots bring their own special security risks. We then look at some of the tools available on the Web that anyone can download for attacking wireless LANs. Our philosophy here is that it is only by sitting in the cockpit of the enemy's plane that you can understand the threat it poses. Finally we make recommendations about practical actions for designing a secure network and look at an open source project that has been established to set up and test the security approaches that you will need to deploy.
We have not focused on specific vendor products. In the end each vendor will package the new security approaches in its own way. They will hide the complexity behind graphical user interfaces and try to simplify the installation and maintenance as much as possible. All this can make life easy for you if you are deploying the equipment. However, while the work required to install systems can be boiled down, we believe that the understanding of what is going on should be sharpened up. Why? Because at the end of the day, you're the one that gets hurt by attacks, not the vendor.
There is no "neighborhood watch" scheme for network security. The administrator or owner of the equipment must be aware of the risks and be proactive in response. Of course most people can't afford, and don't want, to spend all their time working on security issues. We all welcome shortcuts from vendors that simplify or set up the systems. However, remember that salespeople are optimists, but security people must be pessimists.
Our advice to you is simple: Be informed. Take advantage of vendor tools to simplify installation and management but understand what they are doing. Know enough to decide what is best for you and to tweak under the hood when you think it is necessary. Make better purchasing decisions and sleep well at night. Helping you meet these goals is the purpose of this book.
Disclaimer
Readers should be aware that some of the standards described in this book are still under development and may have changed by the time this book is published. The information in this book is intended to be descriptive and should not be relied upon for implementation as a substitute for the published industry standards.
0321136209P07072003
Most helpful customer reviews
19 of 19 people found the following review helpful.
For the serious reader
By Stephen Northcutt
This is the fourth book on 802.11 I have read in 8 weeks and for an important reason. The company I work for is moving more and more to wireless to provide connectivity to our customers.
In terms of understanding architecture, and the cryptography behind the security protocols this was my favorite book. My favorite chapter was the how WEP works and why it doesn't. The writing was clear and the explanations were accurate. I also loved chapter 15, that equipped me to explain why wireless networks are dangerous beasts with detail.
It is a tougher read than some of the other books on the subject, the good news is that you understand the cryptography, the bad news is you have to work through the pages with the crytography.
This is a good book and it is well worth the price. Why did I give it 4 stars instead of 5? It could improve in a couple areas. I think it would have been a stronger, more focused work without chapters 2, 3, and 4. Any reader that is willing to wade through the inner workings of TLS, TKIP or WPA doesn't need a security overview. Also, I really wish more effort had been put into chapter 14, Public Wireless Hotspots. It is good, it covers the fundamentals, but I finished the chapter without increasing my understanding of a question every reader of the book will have. Do I dare check my (encrypted) email at a Starbucks or airport hot spot? That said, I think with second edition the authors will have every chance to take the lead in the crowded field of 802.11 books.
9 of 9 people found the following review helpful.
The Best Details For Wireless Security
By David Curtis
This is a very advanced book, not for the meek at heart. Exceptionally well written with five pages of references, three pages of acronyms and three appendices: AES encryption / block cipher, message modification and file integrity. The authors spare no details about wireless security, yet are still able to make thing easy to understand. Written from an engineering standpoint with emphasis on design and construction of wireless networks, Real 802.11 Security gets down to the nuts and bolts of how wireless works, the current standards now in use and the design implications of the newest standards in development.
Edney and Arbaugh show just how "loose" current wireless systems really are, their vulnerabilities and the most common attack methods used, including man in the middle, WEP cracking and MAC spoofing. They detail the layers of transmittion and how those layers interact in the most common wireless scenarios. They also define the terms and uses of current wireless security including the latest methods under development.
The authors start by making sense of the alphabet soup of wireless security including WEP, RSN, 802.1x, LEAP, PEAP and Radius. They dig down to the actual tools and processes used to hack wireless networks and give excellent summaries of the most commonly used methods. Their examples detail the uses of headers, their encryption and the algorithms used by each security protocol. They then show how each protocol is broken down, how server and client interact and the security holes present.
After a good overview of the current landscape, Edney and Arbaugh go on to show the reader how each protocol stacks up against one another, thus allowing the reader greater flexibility to decide just which type or types of security maybe right for their wireless environment(s). They also give very good examples of the problems inherent to communication and authentication in highly mobile, fast paced environments. The authors go into the details and difficulties of how to strengthen wireless networks thru the understanding and use of algorithms, hardware authentication and transport layer security.
Edney and Arbaugh finalize their book by showing how the protocols are applied and the details of implementing Wi-Fi security in day-to-day actual situations. They use screen shots of actual tools in use making it easier for the novice radio buff to understand the whole process. Any white hat will enjoy the final chapter as the authors proceed to show details on how to craft your own client and server side certificates, construct and harden a RADIUS server using open source software and plan your network.
A must read for all IT professionals running wireless in any sensitive environment. As a learning experience Real 802.11 Security should not be taken lightly by any professional currently designing and implementing wireless solutions.
5 of 5 people found the following review helpful.
Excellent and up to date coverage of wireless security.
By bdaven
The book was a fairly easy read. It covered the basics of wireless security starting from the ground and working up. It was organized well so that if a section was already familiar you could simply jump forward. There is the occasional section where the theory starts to get a little deep, but they warn you and instruct you to skip over the section if it is of no interest.
This was my first book on wireless security and will provide a good basis to move forward to vendor specific security and eventual certification. A great place to start with enough depth to provide a learning opportunity for the more experienced.
See all 22 customer reviews...
Real 802.11 Security: Wi-Fi Protected Access and 802.11i, by Jon Edney, William A. Arbaugh PDF
Real 802.11 Security: Wi-Fi Protected Access and 802.11i, by Jon Edney, William A. Arbaugh EPub
Real 802.11 Security: Wi-Fi Protected Access and 802.11i, by Jon Edney, William A. Arbaugh Doc
Real 802.11 Security: Wi-Fi Protected Access and 802.11i, by Jon Edney, William A. Arbaugh iBooks
Real 802.11 Security: Wi-Fi Protected Access and 802.11i, by Jon Edney, William A. Arbaugh rtf
Real 802.11 Security: Wi-Fi Protected Access and 802.11i, by Jon Edney, William A. Arbaugh Mobipocket
Real 802.11 Security: Wi-Fi Protected Access and 802.11i, by Jon Edney, William A. Arbaugh Kindle
[Z998.Ebook] Download Ebook Real 802.11 Security: Wi-Fi Protected Access and 802.11i, by Jon Edney, William A. Arbaugh Doc
[Z998.Ebook] Download Ebook Real 802.11 Security: Wi-Fi Protected Access and 802.11i, by Jon Edney, William A. Arbaugh Doc
[Z998.Ebook] Download Ebook Real 802.11 Security: Wi-Fi Protected Access and 802.11i, by Jon Edney, William A. Arbaugh Doc
[Z998.Ebook] Download Ebook Real 802.11 Security: Wi-Fi Protected Access and 802.11i, by Jon Edney, William A. Arbaugh Doc
