RE: 802.11i research papers

["Rosado, Rafael (Rafael)" <rarosado () lucent com>]

Andy,

I also forgot to mention a nice little blurb on NetworkFusion about WEP and
WPA - http://www.nwfusion.com/columnists/2004/0119wizards.html

And there is always the whitepaper on 802.1X from the University of Maryland
that discusses the vulnerabilities associated with the 802.1X model (address
by the combination of WPA + TKIP + MIC + EAP - EAP/TLS, EAP-TTLS, PEAP,
LEAP, etc.) - http://www.cs.umd.edu/~waa/1x.pdf 

Hope it helps!

Rafael Rosado, CISSP, CISA
IT Security Manager
Lucent Technologies
IT Infrastructure - Network Design
2400 SW 145th Avenue 
Miramar, Florida 33027 
Office: 954-885-2176 
Facsimile: 954-885-3861 
Email: rarosado () lucent com 

This electronic mail message contains information belonging to Lucent
Technologies, which may be confidential and/or legal privileged. The
information is intended only for the use of the individual or entity named
above. If you are not the intended recipient, you are hereby notified that
any disclosure, printing, copying, distribution, or the taking of any action
in reliance on the contents of this electronically mailed information is
strictly prohibited. If you receive this message in error, please
immediately notify us by electronic mail and delete this message.

-----Original Message-----
From: Rosado, Rafael (Rafael) 
Sent: Thursday, February 12, 2004 2:25 PM
To: 'Andy Blair'; security-basics () securityfocus com
Subject: RE: 802.11i research papers

Andy,

Visit the WiFi Alliance website.  They have several whitepapers associated
with WPA (Wifi Protected Access) which is the replacement to WEP (TKIP is
the interim solution to WEP - dynamically assigned WEP keys, but 802.11i is
the combination of WPA and AES encyrption).

The WiFi Alliance website is -
http://www.wi-fi.org/OpenSection/protected_access.asp?

Good luck with your research!

Rafael Rosado, CISSP, CISA
IT Security Manager
Lucent Technologies
IT Infrastructure - Network Design
2400 SW 145th Avenue
Miramar, Florida 33027
Office: 954-885-2176
Facsimile: 954-885-3861
Email: rarosado () lucent com 

This electronic mail message contains information belonging to Lucent
Technologies, which may be confidential and/or legal privileged. The
information is intended only for the use of the individual or entity named
above. If you are not the intended recipient, you are hereby notified that
any disclosure, printing, copying, distribution, or the taking of any action
in reliance on the contents of this electronically mailed information is
strictly prohibited. If you receive this message in error, please
immediately notify us by electronic mail and delete this message.

-----Original Message-----
From: Andy Blair [mailto:blai0015 () umn edu]
Sent: Wednesday, February 11, 2004 1:40 PM
To: security-basics () securityfocus com
Subject: 802.11i research papers

I am doing a research project on 802.11i and am looking for good research
papers on the subject. I have found it difficult to try and wade through
white papers that are essentially advertisements to find any academic,
informative papers.

Specifically, I am looking at how 802.11i has addressed problems found in
WEP and other security features that the protocol has implemented.

If anyone knows of any good papers or of any websites that collect academic
and research rather than propoganda papers, I would love to visit them. If
you know of any other source of info on this topic it would be helpful as
well.

Thanks for the help!
Andrew Blair


---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.astaro.com/php/contact/securityfocus.php
----------------------------------------------------------------------------

---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.astaro.com/php/contact/securityfocus.php
----------------------------------------------------------------------------