Wireless LAN Vendor Group Looks to Improve Security
New specs target WEP shortcomings
November 4, 2002 12:00 PM ETComputerworld -
A group of wireless LAN technology vendors last week detailed a set of interim specifications designed to beef up security through the use of harder-to-break encryption keys and an industrywide user authentication plan.
The specifications, called Wi-Fi Protected Access (WPA), were announced by the Mountain View, Calif.-based Wi-Fi Alliance trade group. The move is the culmination of an enhanced wireless security initiative that was started earlier this year by a group of vendors, including Microsoft Corp. and Cisco Systems Inc. .
Dennis Eaton, the Wi-Fi Alliance's chairman, said he expects vendors to start rolling out products featuring key components of WPA in February. Among the companies that announced plans to offer WPA-compliant products were Cisco, Hewlett-Packard Co. and Proxim Corp., a Sunnyvale, Calif.-based maker of wireless LAN hardware devices.
The specifications include a built-in mechanism to authenticate the identity of wireless LAN users based on the Extensible Authentication Protocol.
WPA also replaces the static encryption keys incorporated into the existing Wired Equivalent Privacy (WEP) protocol with harder-to-crack dynamic keys based on the Temporal Key Integrity Protocol (TKIP), the alliance said. TKIP is part of a draft 802.11i standard that will supersede WPA but isn't expected to be approved by the Institute of Electrical and Electronics Engineers Inc.'s standards body until 2004.
John Pescatore, an analyst at Gartner Inc. in Stamford, Conn., said the WPA announcement marks the industrywide acceptance of the Safe Secure Networks project launched by Microsoft, Cisco and other vendors. That effort first came to light last month.
Pescatore said corporate IT departments with hundreds or thousands of wireless LAN users could face a daunting task if they have to upgrade the client software on mobile computers to add WPA-compliant capabilities. But upgrading wireless LAN access points should be a relatively easy task that can be managed centrally, he said.
Additional Resources


White Papers & Webcasts
Ponemon Study: The Business Risk of Lost Laptops
Employees can access and store enormous amounts of confidential data on your organization's laptops, leaving your company vulnerable to substantial business risk when...
5 Best Practice Tips for Managing BlackBerry, iPhone, & Windows Mobile Devices
(Source: Zenprise) Mobile devices continue to proliferate across the enterprise, driven largely by the increase in worker productivity, efficiency, and flexibility they provide....
Airport Insecurity: The Case of Lost Laptops
(Source: Dell) Business travelers lose more than 12,000 laptops each week in U.S. airports, yet most admit they don't take steps to protect...
Managing Laptops Outside the Office
(Source: Absolute Software) In this webinar, learn how you can reduce costs by tracking mobile computers no matter where they are located. Featuring...
2007 Gartner Magic Quadrant Report
Riverbed positioned in Leaders Quadrant of Gartner Magic Quadrant for WAN Optimization Controllers. Analyzing strengths vs. cautions, Gartner helps organizations looking to acquire...
What Are 'Free' Remote Support Tools Really Costing You?
(Source: LogMeIn) In this webinar from LogMeIn, discover how "next generation" remote support tools are optimized to provide advanced capabilities like scripting, system...
Forrester Consulting - Optimizing Users and Applications in a Mobile World
Are your workers going increasingly mobile? Don't wait for their calls to slam Support when they experience poor application performance on the road....
IT Strategies for Remotely Supporting a Distributed Workforce
(Source: Citrix Online) Today's workforce is a distributed one - workers across industries are telecommuting, working out of satellite offices and connecting into...
IT Best Practices: To Support or Not Support Consumer Owned Smartphones
Companies have historically standardized on a single smartphone platform. Of late, IT is facing pressure to support the increasing influx of consumer owned...
Usability Is Everything
Learn what sets Workday's HR and Payroll solutions apart from the competition....
Subscribe to Computerworld
