802.11 Security [Paperback]

Bruce Potter (Author), Bob Fleck (Author)

Book Description

ISBN-10: 0596002904 | ISBN-13: 978-0596002909 | Publication Date: December 2002 | Edition: 1st

Mention wireless networks, and the question of security will soon follow. It's not surprising that in spite of compelling business arguments for going wireless, many companies are holding back because of security concerns. But, while it's true that wireless networks create security issues that don't exist in wired networks, the issues are not insurmountable. 802.11 Security shows how you can plan for and successfully contend with security obstacles in your wireless deployment. This authoritative book not only explains the security issues, but shows you how to design and build a your own secure wireless network.

802.11 Security covers the entire process of building secure 802.11-based wireless networks, in particular, the 802.11b ("Wi-Fi") specification. The authors provide detailed coverage of security issues unique to wireless networking, such as Wireless Access Points (WAP), bandwidth stealing, and the problematic Wired Equivalent Privacy component of 802.11. You'll learn how to configure a wireless client and to set up a WAP using either Linux or Free BSD. You'll also find thorough information on controlling network access and encrypting client traffic.

Beginning with an introduction to 802.11b in general, the book gives you a broad basis in theory and practice of wireless security, dispelling some of the myths along the way. In doing so, they provide you with the technical grounding required to think about how the rest of the book applies to your specific needs and situations. Next, the book details the technical setup instructions needed for both the Linux and FreeBSD operating systems. Some of the topics covered include:

• Station Security for Linux, FreeBSD, Open BSD, Mac OS X and Windows
• Setting Up Access Point Security
• Gateway Security, including building Gateways, firewall Rules, Auditing, etc.
• Authentication and Encryption
• FreeBSD IPsec client and gateway configuration
• Linux IPsec client and gateway configuration
• 802.1x authentication

802.11 Security is a book whose time has come. If you are a network, security, or systems engineer, or anyone interested in deploying 802.11b-based systems, you'll want this book beside you every step of the way.

Editorial Reviews

About the Author

is the Manager of Network and Security Operations for VeriSign's Mass Market's division. He manages the security for over a hundred network devices and several hundred servers. He's the founder of the Shmoo Group (www.shmoo.com), a web site for security, cryptography, and privacy professionals, and NoVAWireless (www.novawireless.org), a community-based wireless network project in Northern Virginia.

is a security researcher and the Director of Methodology Development at Secure Software, Inc. He has been involved in wireless networking both through the Northern Virginia community wireless group and through commercial security research into the topology of wireless networks. His recent work includes investigation of layer two attacks against wireless networking devices.

Product Details

• Paperback: 208 pages
• Publisher: O'Reilly Media; 1st edition (December 2002)
• Language: English
• ISBN-10: 0596002904
• ISBN-13: 978-0596002909
• Product Dimensions: 8.8 x 7.5 x 0.5 inches
• Shipping Weight: 14.4 ounces (View shipping rates and policies)
• Average Customer Review: 3.5 out of 5 stars  See all reviews (13 customer reviews)
• Amazon Best Sellers Rank: #1,395,707 in Books (See Top 100 in Books)

More About the Author

Discover books, learn about writers, read author blogs, and more.

Customer Reviews

Most Helpful Customer Reviews

11 of 11 people found the following review helpful:

4.0 out of 5 stars David Weeks MyMac.com Book Review, February 11, 2003

By 

Tim E Robertson "Publisher MyMac" (Battle Creek, Mi United States) - See all my reviews
(VINE VOICE)    (REAL NAME)   

This review is from: 802.11 Security (Paperback)

GEEK ALERT!

Warning Will Robinson! This small book on 802.11b wireless security (167 pages not including the comprehensive index) is not for the faint of heart. To take full advantage of the copious amount of detail that Potter and Fleck provide, you need a good working knowledge of networking, and familiarity with either the Linux, FreeBSD, or OpenBSD operating systems.

802.11 Security is aimed at people who need to configure and administer secure 802.11b wireless (popularly named Airport or WiFi) networks. 802.11 Security is NOT targeted at the casual home computer user who merely wants to keep others from poaching their wireless connection. Those users are best served by Adam Engst's and Glenn Fleishman's Wireless Internet Starter Kit.

However, if you have any interest in comprehensive and detailed knowledge of how 802.11b security works from the network administrator's viewpoint, 802.11 Security is the book for you. Potter and Fleck have years of experience with Unix security issues, and have several papers on the subject to their credit.

After setting the stage with a good discussion of the many problems with wireless security, the authors outline some of the more common types of attacks on wireless networks. Why? Their point is that understanding the nature of the "Man-in-the-middle" attack (for example) is important for knowing how to prevent it. This point shows that 802.11 Security is more than just a "cookbook" manual. It provides the "why" as well as the "how."

The bulk of the book covers how to configure FreeBSD, Linux, and OpenBSD clients, gateways, and access points (base stations for us Apple types). Plenty of examples are provided. However, with no CD included to allow copy-and-paste, you'll need to enter everything manually if you want to follow the examples verbatim. In reality, the lack of a CD is not an issue, as the typical sysadmin is going to be working on their customized installation, and will need to tweak the code examples.

802.11 Security does have ten pages on Mac OSX station configuration, as well as a smaller section on Windows setup. For those adventurous readers, the Mac setup section has plenty of examples on how to configure OSX's built-in firewall for best wireless security. The relative paucity on client computer setup is one of the few drawbacks for an end-user reader, as the book focuses on administrator issues.

802.11 Security is a good read for the Unix sysadmin who is new to wireless networks, or for the aficionados who want to roll their own home wireless network security. Again, this is not a mass-market book. But if you're not the average home user, 802.11 Security is a worthwhile book.

MacMice Rating: 4 out of 5

David Weeks
[website]

10 of 10 people found the following review helpful:

5.0 out of 5 stars It is not the Music. . . . . ., February 15, 2003

By 

Marco De Vivo "Mr. TCP/IP" (Miami, Florida United States) - See all my reviews
(REAL NAME)   

This review is from: 802.11 Security (Paperback)

You don't know me. So you are not supposed to trust me blindly.

However, after years in this (security) area, let me share a thought with you: It is not the music, but who and how is playing it that matters.

This is a superb book, as excellent as the well known experience of the writers.

I recently hired three security pros. with not previous knowledge in wireless security. I gave them just one weapon: This Book.

After just a week in their first wireless scenario, were able to detect and correctly react to several related security incidents.

Don't let other reviews fool you. This is an outstanding book.

If this is your area of interest believe me and buy it.

If then you think I was wrong. . . well don't trust any more in my reviews (bet it won't happen).

12 of 13 people found the following review helpful:

3.0 out of 5 stars Wonderful book, title should mention Unix., September 29, 2003

By 

Stephen Northcutt (Kauai, HI USA) - See all my reviews
(REAL NAME)   

This review is from: 802.11 Security (Paperback)

802.11 Security is another fine O'Reilly book, it is very nicely written and laid out and the message is crystal clear.

The reason I gave it three stars was that the book is heavily biased towards Linux, Free BSD, and Open BSD and the title does not reflect the bias. That is not a bad thing, I found the unix information wonderful, but if you are ordering 802.11 Security over the web, you might easily miss the unix emphasis and end up with a book that doesn't meet your needs.