802.11 Security

Bruce Potter is the Manager of Network and Security Operations for VeriSign's Mass Market's division. He manages the security for over a hundred network devices and several hundred servers. He's the founder of the Shmoo Group (www.shmoo.com), a web site for security, cryptography, and privacy professionals, and NoVAWireless (www.novawireless.org), a community-based wireless network project in Northern Virginia. Bob Fleck is a security researcher and the Director of Methodology Development at Secure Software, Inc. He has been involved in wireless networking both through the Northern Virginia community wireless group and through commercial security research into the topology of wireless networks. His recent work includes investigation of layer two attacks against wireless networking devices.

• Preface Part I. 802.11 Security Basics 1. A Wireless World What Is Wireless? Radio Transmission Inherent Insecurity 802.11 Structure of 802.11 MAC WEP Problems with WEP Is It Hopeless? 2. Attacks and Risks An Example Network Denial-of-Service Attacks Man-in-the-Middle Attacks Illicit Use Wireless Risks Knowing Is Half the Battle Part II. Station Security 3. Station Security Client Security Goals Audit Logging Security Updates 4. FreeBSD Station Security FreeBSD Client Setup 5. Linux Station Security Linux Client Setup Kernel Configuration OS Protection Audit Logging Secure Communication 6. OpenBSD Station Security OpenBSD Client Setup Kernel Configuration OS Protection Audit Logging 7. Mac OS X Station Security Mac OS X Setup OS Protection Audit Logging 8. Windows Station Security Windows Client Setup OS Protection Audit Logging Secure Communication Part III. Access Point Security 9. Setting Up an Access Point General Access Point Security Setting Up a Linux Access Point Setting Up a FreeBSD Access Point Setting Up an OpenBSD Access Point Taking It to the Gateway Part IV. Gateway Security 10. Gateway Security Gateway Architecture Secure Installation Firewall Rule Creation Audit Logging 11. Building a Linux Gateway Laying Out the Network Building the Gateway Configuring Network Interfaces Building the Firewall Rules AC Address Filtering DHCP DNS Static ARP Audit Logging Wrapping Up 12. Building a FreeBSD Gateway Building the Gateway Building the Firewall Rules Rate Limiting DHCP DNS Static ARP Auditing 13. Building an OpenBSD Gateway Building the Gateway Building the Firewall Rules Rate Limiting DHCP DNS Static ARP Auditing 14. Authentication and Encryption Portals IPsec VPN 802.1x 15. Putting It All Together Pieces of a Coherent System User Knowledge Looking Ahead Index