Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Basics
[Top] [All Lists]

Re: Is Dynamic WEP Secure Enough?

Subject: Re: Is Dynamic WEP Secure Enough?
Date: Mon, 21 Mar 2005 19:49:27 -0500
Wep is secure as long as you don't see sharing all your resources with an attacker.

Kelly Martin wrote:
No, WEP can be cracked in less than ten minutes (even on a network without much traffic - a hacker can stimulate his own traffic). Rotating keys just isn't enough to cover the weaknesses, unless you want to rotate keys every three minutes. :) Personally I think WPA is the only way to go, or else you might as well keep the network open and turn WEP off entirely.

We published the following articles by Michael Ossmann on SecurityFocus recently:

WEP: Dead Again, Part 1  http://www.securityfocus.com/infocus/1814
WEP: Dead Again, Part 2  http://www.securityfocus.com/infocus/1824

Regards,

Kelly Martin


Jon Smith wrote:

Hi
I am responsible for a large wireless infrastructure upgrade. Right now my plan is use PEAP w MSCHAP v2 with dynamic WEP crypto for my corporate SSID (I have others with much lower security requirements). I cannot easily go to WPA without ditching all my current devices that do not support it (good luck getting that past the CFO). We have a lot of physical security and surveillance with very tight controls, my primary area of concern would be people like myself sitting in the parking lot. Due to one of our applications, we will be sending a clear strong signal to the parking lot. Is this enough security and encryption to significantly slow intrusion attempts? Between direction finding capabilities of the Access Points and our roaming guards it would be a matter of time before we detected them.


Thanks

Rocko

_________________________________________________________________
Is your PC infected? Get a FREE online computer virus scan from McAfee® Security. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963




<Prev in Thread] Current Thread [Next in Thread>