Threats and Security Mechanisms

High bandwidth wireless local area networks are gaining popularity. Along with this popularity has come a well publicized series of vulnerabilities in the IEEE standard implementations. In response, a number of standards from wired networking (e.g. 802.1x and IPsec) are being adopted to wireless. Vendors are also developing and selling proprietary security solutions. The normal security risk assessment/risk mitigation process can be complicated by a misunderstanding of the range of available options and the strengths and weaknesses of each. However, the nature of wireless technology raises the stakes in performing a proper risk assessment and deploying a wireless network that meets local security requirements. This white paper first describes taxonomy of wireless LAN attack techniques. We then describe the generic mechanisms available for authentication of users and the protection of the privacy and integrity of the data. We conduct a basic analysis of each security countermeasure by looking at the attack techniques addressed by the mechanism. Our analysis takes into account the perspective of both insiders and outsiders. We conclude by stating our recommendations for WLANs. These recommendations include: · Mutual Authentication · Layer two encrypted tunnel · Strong cryptographic integrity verification Without these features, not only is a WLAN vulnerable, but the entire information infrastructure of which it is a part is at risk. We also recommend per-packet authentication although we would not go so far as to make it a requirement