802.11 Security

Mention wireless networks, and the question of security will soon follow. It's not surprising that in spite of compelling business arguments for going wireless, many companies are holding back because of security concerns. But, while it's true that wireless networks create security issues that don't exist in wired networks, the issues are not insurmountable. 802.11 Security shows how you can plan for and successfully contend with security obstacles in your wireless deployment. This authoritative book not only explains the security issues, but shows you how to design and build a your own secure wireless network.

802.11 Security covers the entire process of building secure 802.11-based wireless networks, in particular, the 802.11b ("Wi-Fi") specification. The authors provide detailed coverage of security issues unique to wireless networking, such as Wireless Access Points (WAP), bandwidth stealing, and the problematic Wired Equivalent Privacy component of 802.11. You'll learn how to configure a wireless client and to set up a WAP using either Linux or Free BSD. You'll also find thorough information on controlling network access and encrypting client traffic.

Beginning with an introduction to 802.11b in general, the book gives you a broad basis in theory and practice of wireless security, dispelling some of the myths along the way. In doing so, they provide you with the technical grounding required to think about how the rest of the book applies to your specific needs and situations. Next, the book details the technical setup instructions needed for both the Linux and FreeBSD operating systems.
Some of the topics covered include:

• Station Security for Linux, FreeBSD, Open BSD, Mac OS X and Windows
• Setting Up Access Point Security
• Gateway Security, including building Gateways, firewall Rules, Auditing, etc.
• Authentication and Encryption
• FreeBSD IPsec client and gateway configuration
• Linux IPsec client and gateway configuration
• 802.1x authentication

802.11 Security is a book whose time has come. If you are a network, security, or systems engineer, or anyone interested in deploying 802.11b-based systems, you'll want this book beside you every step of the way.

Table of Contents

Preface

Part I. 802.11 Security Basics

1. A Wireless World

2. Attacks and Risks

Part II. Station Security

3. Station Security

4. FreeBSD Station Security

5. Linux Station Security

6. OpenBSD Station Security

7. Mac OS X Station Security

8. Windows Station Security

Part III. Access Point Security

9. Setting Up an Access Point

Part IV. Gateway Security

10. Gateway Security

11. Building a Linux Gateway

12. Building a FreeBSD Gateway

13. Building an OpenBSD Gateway

14. Authentication and Encryption

15. Putting It All Together

Index

提及無線網路，安全問題很快就會跟著出現。雖然無線網路有著引人注目的商業優勢，但由於安全顧慮，許多公司仍然猶豫不前。然而，儘管無線網路在安全性上存在問題，但這些問題並非無法克服。《802.11安全》一書展示了如何在無線部署中規劃並成功應對安全障礙。這本權威性的書籍不僅解釋了安全問題，還向您展示如何設計和建立自己的安全無線網路。

《802.11安全》涵蓋了建立安全的基於802.11的無線網路的整個過程，特別是802.11b（"Wi-Fi"）規範。作者詳細介紹了無線網路獨有的安全問題，例如無線存取點（WAP）、帶寬竊取和有問題的802.11的Wired Equivalent Privacy組件。您將學習如何配置無線客戶端，並使用Linux或FreeBSD設置WAP。您還將找到關於控制網路存取和加密客戶端流量的詳細信息。

從對802.11b的簡介開始，本書為您提供了關於無線安全理論和實踐的廣泛基礎，同時還揭示了其中的一些迷思。這樣做可以為您提供思考本書其餘部分如何應用於您特定需求和情況的技術基礎。接下來，本書詳細介紹了Linux和FreeBSD操作系統所需的技術設置指南。

一些涵蓋的主題包括：

- Linux、FreeBSD、OpenBSD、Mac OS X和Windows的站點安全性
- 設置存取點安全性
- 網關安全性，包括建立網關、防火牆規則、審計等
- 認證和加密
- FreeBSD IPsec客戶端和網關配置
- Linux IPsec客戶端和網關配置
- 802.1x認證

《802.11安全》是一本及時的書籍。如果您是網路、安全或系統工程師，或者對部署基於802.11b的系統感興趣，您將希望在每一步都有這本書作為參考。

目錄：

前言

第一部分：802.11安全基礎

1. 無線世界

2. 攻擊和風險

第二部分：站點安全

3. 站點安全

4. FreeBSD站點安全

5. Linux站點安全

6. OpenBSD站點安全

7. Mac OS X站點安全

8. Windows站點安全

第三部分：存取點安全

9. 設置存取點

第四部分：網關安全

10. 網關安全

11. 建立Linux網關

12. 建立FreeBSD網關

13. 建立OpenBSD網關

14. 認證和加密

15. 綜合應用

索引