Enterprise Wireless LAN Security & WLAN Monitoring

802.11 Security

Below are links to white papers and presentations regarding WEP security:

InternetNews.com: The Next 802.11 Revolution?

Researchers crack new wirelss security spec

The IEEE 802.11 specifications (includes WEP spec)

802.11 Planet

A summary presentation on WEP security issues (from 802.11 Tgi)

WiFi Alliance

VPN Standards & Security

Is VPN is the answer to WEP security problems? The next question is "which vendor's VPN?" Almost all IPsec tunnel mode products shipping today are proprietary, interoperability is poor and many of the proprietary extensions have security flaws. Below are the references to the security analyses of VPN protocols as well as to the IETF standards for VPN.

Security analysis of PPTPv2

Security analysis of PPTP

Microsoft view on PPTP

Security analysis of XAUTH (shipping in most IPsec tunnel mode implementations)

Remote Access Dialin User Service (RADIUS)

RADIUS is a widely deployed protocol for network access authentication, authorization and accounting (AAA). There are several weaknesses including issues with security and transport. Below are links to Radius papers:

RADIUS authentication (Proposed Standard, RFC 2865)

RADIUS accounting (Informational, RFC 2866)

RADIUS/EAP (Informational, RFC 2869)