The security flaw in the
specifications 802.11b and its successor 802.11a used in wireless
LANs has recently received its share of press, leaving a cloud of
doubt over the use of wireless LANs.
Because data is transmitted through the airwaves, it makes it
easy for hackers close by to intercept data using any wireless LAN
client served by a data transmitter. The Wired Equivalent Privacy
(WEP) standard has been identified as the inherent flaw in the Wi-Fi
specifications, making wireless LANs open to attack.
Companies such as Cisco and Microsoft have played instrumental
roles in the evolution of a new security framework for wireless
networks based on the progress made on the Institute of Electrical
and Electronics Engineers (IEEE) 802.1x and Extensible
Authentication Protocol (EAP) standard.
EAP is at the core of the 802.1x standard that will enable
wireless client adapters manufacturers and RADIUS server vendors to
deploy products based on the standard, thus ensuring an end-to-end
secure solution.
In January, Cisco introduced its Aironet 350 Series incorporating
this 802.1x security standard.
As reported in eWEEK Lab, when the Microsoft XP operating system
becomes available next month, it will offer customers the option of
wireless LAN capabilities, featuring the integration of the 802.1x
standard. The operating system will thus support the EAP, which
provides session-specific wireless encryption keys, central user
administration via third-party RADIUS servers, and mutual
authentication between client and access point, and RADIUS server
and access point.
Wireless LAN vendors like Cisco and Microsoft are looking to the
802.1x as a means of resurrecting confidence in wireless LANs.
For more information:
