Remedies Use of encrypted tunneling protocols (e.g. IPSec, Secure Shell) for secure data transmission over an insecure networktunneling protocolsIPSecSecure Shell WEP2 A stopgap enhancement to WEP, implementable on some (not all) hardware not able to handle WPA or WPA2, based on: Enlarged IV value Enforced 128-bit encryption Remains vulnerable to known WEP attacks — at most it will just slow an attacker down a bit WEPplus A.K.A WEP+. A proprietary enhancement to WEP by Agere Systems that enhances WEP security by avoiding "weak IVs". It is only completely effective when WEPplus is used at both ends of the wireless connection. As this cannot easily be enforced, it remains a serious limitation. It is possible that successful attacks against WEPplus will eventually be found. It also does not necessarily prevent replay attacks.Agere Systemsreplay attacks WPA and WPA2 Either is much more secure than WEP. To add support for WPA or WPA2, some old Wi-Fi access points might need to be replaced or have their firmware upgraded.access points firmware

Mobile Wireless/Personal NW

Roaming personal network: such as PDA, mobile phone, laptop, health monitoring devices, etc. -roaming personal network, as the user might carry this network with him and roam from one public network to another. Home personal network: devices and components that belong to a user and are located at a remote site. -might include home appliances such as TV or washing machine, music directory, VoIP server, server and other services and devices. -could also be the business environment of the user such as data repository and calendar manager. Foreign personal network: devices and services that might complement the users’ devices and services but do not belong to them. -such as a large display screen that might be used by a roaming user as an extension to her personal network. Public network: networking infrastructure that connects the user to the Internet and thereby to her home (personal) network as well as to foreign (personal) networks

Service Discovery& Security Existing service discovery protocols are Jini, Salutation, UPnP, SLP and the Bluetooth Service Discovery Protocol. Two protocols that stand out here are Splendour and Secure Service Discovery Service. –have built in security. The latter also handles mobility. Any PN will involve separate PANs communicating over shared infrastructure – be it a wired Internet, a WLAN or an UMTS cellular network. Internet security schemes like RADIUS and DIAMETER Security features offered by WLANs and UMTS. RADIUS –is a client server protocol between an access server and a central RADIUS server. –Provides hop-by-hop security and a variety of authentication methods. DIAMETER –is based on RADIUS, – but it also provides end-to-end security and a mechanism for congestion control. Security in the IEEE family of protocols –has been bolstered by the introduction of the 802.1x and the i standards UMTS provides mutual authentication between mobile terminal and base station. KASUMI algorithm provides encryption and data integrity in a UMTS network Concept of “sabdbox” to contain download/imported apps.

Security in Roaming Secure device-to-device communication: This involves the case when a certain device wants to join an ad hoc network, for instance, a Bluetooth device requesting to join a piconet. Since there is no infrastructure in ad hoc networks, it will be difficult to make a decision regarding the trust of other parties. The communication between devices also needs to be encrypted in order to preserve confidentiality. Secure network communication: After establishing a personal network consisting of various devices one needs to ensure that the networking aspects such as routing and addressing are handled securely. This involves detecting false routing entries, denial of service attacks on the networking layers and so on. User to device authentication: This involves the secure authentication and authorisation of a user before accessing a device belonging to the personal network. Here the issue of userdevice interaction and authentication methods such as SIM cards, biological prints, etc. must be addressed. Secure application level communication: This involves addressing the security aspects of the inter-application interaction. Here issues such as providing secure messaging or VoIP communication are to be addressed. This is especially important as many applications use centralised control points such as a VoIP server or a naming server. With personal networks providing intelligent and advanced services in an ad hoc manner, such services and the AAA aspects related to them must be distributed.

Credentials Provided to An Identity Provider

RFID Security Types of RFID Tags Types of Attacks