Analysing and attacking the 4-way handshake of IEEE 802.11i standard

Luo, Fangwei; Han, Jianmin; Lu, Jianfeng; Peng, Hao

doi:10.1109/icist.2013.6747576

Cited by 6 publications

(3 citation statements)

References 19 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Fig. 8 shows the general 802.1x messaging steps (Chen and Wang 2005;Fantacci et al 2007;Gu and Zhang 2010;Zha and Ma 2010;Alabdulatif et al 2013;Hermaduanti and Riadi 2016). When Fig.…”

Section: Proposed Methodsmentioning

confidence: 99%

An Effective Security Method Based on Combining 802.1x, DMZ and SSL-VPN for IoT Network Security

Kilinçer¹,

Ertam²,

Yaman³

et al. 2020

ACIN

View full text Add to dashboard Cite

IoT applications appear in many areas due to their flexible structures and many advantages they provide. The increase in IoT applications brings many security vulnerabilities. In order to close these security gaps and ensure the security of the created system, some measures should be taken by combining existing technologies with new technologies. In this study, a method that uses various security technologies together is proposed to ensure the security of the IoT application network. Accordingly, 802.1x technology was used to connect wireless sensor devices to a Wi-Fi network. Thus, in the first step, unauthorized users are not allowed to connect to this network. In the second step, IoT data was collected on a central server, and this server was taken to the DMZ zone in the firewall. Thus, access to the server is both restricted, and server access is logged. In the last step, with SSL-VPN configured in the firewall, data can be safely monitored from the external environment. The biggest advantages of the proposed approach are that it can be used easily in existing Wi-Fi networks, provides communication security, and is low cost. Considering these advantages, it is considered to be an important work in the field of IoT network security..

show abstract

“…Fig. 8 shows the general 802.1x messaging steps (Chen and Wang 2005;Fantacci et al 2007;Gu and Zhang 2010;Zha and Ma 2010;Alabdulatif et al 2013;Hermaduanti and Riadi 2016). When Fig.…”

Section: Proposed Methodsmentioning

confidence: 99%

An Effective Security Method Based on Combining 802.1x, DMZ and SSL-VPN for IoT Network Security

Kilinçer¹,

Ertam²,

Yaman³

et al. 2020

ACIN

View full text Add to dashboard Cite

show abstract

“…Thus, this vulnerability blocks the subsequent handshakes because of inconsistencies in the PTK at the authenticator and the supplicant. Smart attackers can determine the perfect time to send the forged first message by sniffing WLAN traffic, or may simply flood the WLAN with messages, causing a DoS [32,33].…”

Section: Forged First Message In a Four-way Handshakementioning

confidence: 99%

Rogue Access Point Detection: Taxonomy, Challenges, and Future Directions

Alotaibi

Elleithy

2016

Wireless Pers Commun

View full text Add to dashboard Cite

Wireless Local Area Networks (WLANs) are increasingly integrated into our daily lives. Access Points (APs) are an integral part of the WLAN infrastructure, as they are responsible for coordinating wireless users and connecting them to the wired side of the network and, eventually, to the Internet. APs are deployed everywhere, from airports and shopping malls to coffee shops and hospitals, to provide Internet connectivity. One of the most serious security problems encountered by WLAN users is the existence of Rogue Access Points (RAPs). This article classifies existing solutions, identifies vulnerabilities, and suggests future directions for research into these RAPs. The ultimate objective is to classify existing detection techniques and find new RAP types that have not been classified by the research community. The literature typically categorizes Evil-twin, Unauthorized, Compromised, and Improperly Configured RAPs. Two other types have largely been abandoned by researchers, but can be classified as Denial of Service RAP attacks. These are deauthentication/disassociation attacks targeting wireless users, and the forging of the first message in a four-way handshake.

show abstract

“…For increasing security, the PMK isn't transmitted through the network. PTK is generated using PMK, and GTK is generated using GMK [5]. All unicast traffic between U and AP are encrypted using PTK, and all broadcast traffic between AP and the number of users are encrypted using GTK [3].…”

Section: Introductionmentioning

confidence: 99%

Untraceable Authentication Protocol for IEEE802.11s Standard

Abouhogail

2021

Int. j. commun. netw. inf. secur.

View full text Add to dashboard Cite

In the current paper, a new handover authentication protocol for IEEE802.11s Wireless mesh networks is presented. The new protocol divides the network into a number of cells, each cell contains a number of access points and based on the concept of ticket authentication, the mesh user takes a new ticket when enters the region of a new cell which decreases the handover latency. Moreover, in the current paper, a new idea for ticket generation is proposed, called Chain Ticket Derivation Function (CTDF), which uses the concept of a chain. Using CTDF in our proposed protocol raises the level of privacy for the users. The security analysis presented in the paper showed more strengths in our proposed scheme. Two formal verification tools, AVISPA and BAN logic are used to test the proposed protocol.

show abstract

Analysing and attacking the 4-way handshake of IEEE 802.11i standard

Cited by 6 publications

References 19 publications

An Effective Security Method Based on Combining 802.1x, DMZ and SSL-VPN for IoT Network Security

An Effective Security Method Based on Combining 802.1x, DMZ and SSL-VPN for IoT Network Security

Rogue Access Point Detection: Taxonomy, Challenges, and Future Directions

Untraceable Authentication Protocol for IEEE802.11s Standard

Contact Info

Product

Resources

About