A Survey of Wireless Security
---
paper_title: Static and dynamic 4-way handshake solutions to avoid denial of service attack in Wi-Fi protected access and IEEE 802.11i

paper_content:

This paper focuses on WPA and IEEE 802.11i protocols that represent two important solutions in the wireless environment. Scenarios where it is possible to produce a DoS attack and DoS flooding attacks are outlined. The last phase of the authentication process, represented by the 4-way handshake procedure, is shown to be unsafe from DoS attack. This can produce the undesired effect of memory exhaustion if a flooding DoS attack is conducted. In order to avoid DoS attack without increasing the complexity of wireless mobile devices too much and without changing through some further control fields of the frame structure of wireless security protocols, a solution is found and an extension of WPA and IEEE 802.11 is proposed. A protocol extension with three "static" variants and with a resource-aware dynamic approach is considered. The three enhancements to the standard protocols are achieved through some simple changes on the client side and they are robust against DoS and DoS flooding attack. Advantages introduced by the proposal are validated by simulation campaigns and simulation parameters such as attempted attacks, successful attacks, and CPU load, while the algorithm execution time is evaluated. Simulation results show how the three static solutions avoid memory exhaustion and present a good performance in terms of CPU load and execution time in comparison with the standard WPA and IEEE 802.11i protocols. However, if the mobile device presents different resource availability in terms of CPU and memory or if resource availability significantly changes in time, a dynamic approach that is able to switch among three different modalities could be more suitable.
---
paper_title: A trivial denial of service attack on IEEE 802.11 direct sequence spread spectrum wireless LANs

paper_content:

The paper describes a trivial, but highly effective, denial of service attack based on commonly available IEEE 802.11 hardware and freely available software. The attack requires limited resources and is inexpensive to mount. The paper discusses the attack, its implementation, and provides an analysis of methods to achieve optimal denial of service results. While there is currently no defense against this type of attack, the paper also discusses possibilities for attack mitigation.
---
paper_title: Holistic approach to Wep protocol in securing wireless network infrastructure

paper_content:

Constant increase in use of wireless infrastructure networks for business purposes created a need for strong safety mechanisms. This paper describes WEP (Wired Equivalent Privacy) protocol for the protection of wireless networks, its security deficiencies, as well as the various kinds of attacks that can jeopardize security goals of WEP protocol: authentication confidentiality and integrity. The paper, also, gives a summary of security improvements of WEP protocol that can lead to the higher level of wireless network infrastructure protection. Comparative analysis shows the advantages of the new 802.11i standard in comparison to the previous security solutions. A proposal of possible security improvements of RSNA (Robust Security Network Association) is presented.
---
paper_title: Intercepting mobile communications: the insecurity of 802.11

paper_content:

The 802.11 standard for wireless networks includes a Wired Equivalent Privacy (WEP) protocol, used to protect link-layer communications from eavesdropping and other attacks. We have discovered several serious security flaws in the protocol, stemming from mis-application of cryptographic primitives. The flaws lead to a number of practical attacks that demonstrate that WEP fails to achieve its security goals. In this paper, we discuss in detail each of the flaws, the underlying security principle violations, and the ensuing attacks.
---
paper_title: Some Remarks on the TKIP Key Mixing Function of IEEE 802.11i

paper_content:

Temporal key integrity protocol (TKIP) is a sub-protocol of IEEE 802.11i. TKIP remedies some security flaws in wired equivalent privacy (WEP) protocol. TKIP adds four new algorithms to WEP: a message integrity code (MIC) called Michael, an initialization vector (IV) sequencing discipline, a key mixing function and a re-keying mechanism. The key mixing function, also called temporal key hash, de-correlates the IVs from weak keys. Some cryptographic properties of the substitution box (S-box) used in the key mixing function are investigated in this paper, such as regularity, avalanche effect, differ uniform and linear structure. Moen et al pointed out that there existed a temporal key recovery attack in TKIP key mixing function. In this paper a method is proposed to defend against the attack, and the resulting effect on performance is discussed.
---
paper_title: Counter with CBC-MAC (CCM)

paper_content:

Counter with CBC-MAC (CCM) is a generic authenticated encryption block cipher mode. CCM is defined for use with 128-bit block ciphers, such as the Advanced Encryption Standard (AES).
---
paper_title: Experiences in passively detecting session hijacking attacks in IEEE 802.11 networks

paper_content:

Current IEEE 802.11 wireless networks are vulnerable to session hijacking attacks as the existing standards fail to address the lack of authentication of management frames and network card addresses, and rely on loosely coupled state machines. Even the new WLAN security standard - IEEE 802.11i does not address these issues. In our previous work, we proposed two new techniques for improving detection of session hijacking attacks that are passive, computationally inexpensive, reliable, and have minimal impact on network performance. These techniques utilise unspoofable characteristics from the MAC protocol and the physical layer to enhance confidence in the intrusion detection process. This paper extends our earlier work and explores usability, robustness and accuracy of these intrusion detection techniques by applying them to eight distinct test scenarios. A correlation engine has also been introduced to maintain the false positives and false negatives at a manageable level. We also explore the process of selecting optimum thresholds for both detection techniques. For the purposes of our experiments, Snort-Wireless open source wireless intrusion detection system was extended to implement these new techniques and the correlation engine. Absence of any false negatives and low number of false positives in all eight test scenarios successfully demonstrated the effectiveness of the correlation engine and the accuracy of the detection techniques.
---

Title: A Survey of Wireless Security
Section 1: Introduction
Description 1: This section introduces the topic of wireless network security, highlighting the growing popularity of wireless networks, their advantages, and the need for security mechanisms.

Section 2: Security Threats to 802.11 Wireless Networks
Description 2: This section describes various security threats that can jeopardize the security of 802.11 wireless networks, including attacks on confidentiality, integrity, and availability.

Section 3: WEP Protocol
Description 3: This section explains the WEP protocol, its functions, and how it aims to provide data security for wireless networks.

Section 4: Security Deficiencies of WEP Protocol
Description 4: This section details the security deficiencies of the WEP protocol, including risks of keystream reuse, key management issues, message modification, injection, and decryption vulnerabilities.

Section 5: Safety Improvements of WEP
Description 5: This section describes significant safety improvements of WEP protocol, including comparisons with WPA and WPA2, and the new IEEE 802.11i standard.

Section 6: RSA Patch for WEP
Description 6: This section explains the RSA patch for WEP, an improvement designed to generate unique keys for each packet to enhance security.

Section 7: Wi-Fi Protection
Description 7: This section details Wi-Fi Protected Access (WPA), its features, and enhancements over WEP to provide stronger protection for wireless networks.

Section 8: TKIP
Description 8: This section explains the Temporal Key Integrity Protocol (TKIP), a set of algorithms designed to improve and solve security problems of WEP.

Section 9: 802.1x
Description 9: This section discusses the 802.1x standard for secure network access and its role in wireless security, including its authentication mechanisms.

Section 10: RC4 and AES Cryptographic Algorithms
Description 10: This section describes the RC4 and AES cryptographic algorithms, their functionalities, and their roles in ensuring data confidentiality and integrity in wireless networks.

Section 11: Conclusion
Description 11: This section summarizes the survey, highlighting the key points about wireless security protocols, their improvements, and remaining challenges.