Slashdot Mirror

← Back to Stories (view on slashdot.org)

802.1X Security Overview

Posted by michael on from the secure-your-network-or-someone-else-will dept.

HJ Franzen writes "Ars Technica have what they call a wireless security blackpaper posted that's well worth a read. I wish this was available when I was spec'ing wireless VPN solutions for my campus. The article is pretty detailed and discusses the many ways in which companies are trying to address the fatal flaws in WEP."

4 of 98 comments (clear)

  1. For those of you who need some info on.... by karnal · · Score: 4, Informative

    how the current standard is broken, visit toms hardware:

    http://www.tomshardware.com/network/02q3/020719/ in dex.html

    They've got some good information on why 64/40 and 128 bit encryption isn't enough; as well as why the current "consumer-level" equipment can't do enough to thwart drive-bys.

    --
    Karnal
  2. personal security by Jacer · · Score: 5, Interesting

    i use a little "consumer elvel" access point/router with DHCP turned off, and a strong subnet mask (i'm talking 29 bits!) then i filled up every IP address in the range by assiging multiple ip addresses to the adapter on my server

    --
    --fetch daddy's blue fright wig, i must be handsome when i release my rage
  3. Re:SSID Security by Conspiracy+Theorist · · Score: 4, Informative

    Actually most APs broadcast a few (or many) Beacon Frames every second rather than a Beacon every few seconds. But to your question, the client (whether authorized or un-authorized) needs the SSID to associate with an AP. Picking one that is difficult to guess and using a AP that can suppress the SSID in Beacon Frames makes it that much more difficult for an un-authorized client to associate with your AP.

  4. Re:wep is a stupid idea by Oculus+Habent · · Score: 5, Insightful
    You want wireless you're gonnna have to accept the freeloaders on your service.

    I haven't played with any wireless base stations other than my AirPort, but I can limit MAC Addresses, as well. Sure, this doesn't work in an environment where many friends/clients will be accessing your network unexpectedly, but in a home/school where the number of new users is extremely limited or well-controlled, this can improve security quite substantially.

    Sure, they can still sniff packets, and they can still break encryption, but it will be a sight harder for them to access your wired network/Internet connection.

    --
    That what was all this school was for... to teach us how to solve our own problems. -- janeowit