Adaptation of IEEE 802.1x for secure session establishment between ethernet peers

Authors:
Purificación Sáiz;Jon Matías;Eduardo Jacob;Javier Bustamante;Armando Astarloa
Affiliations:
Dep. of Electronics and Telecommunications, University of the Basque Country, Faculty of Engineering of Bilbao, Bilbao, Spain;Dep. of Electronics and Telecommunications, University of the Basque Country, Faculty of Engineering of Bilbao, Bilbao, Spain;Dep. of Electronics and Telecommunications, University of the Basque Country, Faculty of Engineering of Bilbao, Bilbao, Spain;Dep. of Electronics and Telecommunications, University of the Basque Country, Faculty of Engineering of Bilbao, Bilbao, Spain;Dep. of Electronics and Telecommunications, University of the Basque Country, Faculty of Engineering of Bilbao, Bilbao, Spain
Venue:
ICISS'06 Proceedings of the Second international conference on Information Systems Security
Year:
2006

Citing 3
Cited 0

Intercepting mobile communications: the insecurity of 802.11

Proceedings of the 7th annual international conference on Mobile computing and networking
Wireless LAN security and IEEE 802.11i

IEEE Wireless Communications
Extensible authentication protocol (EAP) and IEEE 802.1x: tutorial and empirical experience

IEEE Communications Magazine

Quantified Score

Hi-index	0.00

Visualization

Abstract

Network connectivity has undergone a significant change since the appearance and increasing deployment of IEEE 802.11 technology. Wireless links are inherently insecure and, in order to secure them, the IEEE 802.11i amendment has defined the security mechanisms to be used. The solution described in IEEE 802.11i is applicable, in theory, to both infrastructure and ad-hoc networks. Nevertheless, the great deployment of wireless access points and the potential economical benefits derived from it impelled the standardization bodies to provide a security solution for IEEE 802.11 access links. Therefore, IEEE 802.11i has been designed as an infrastructure-oriented solution, and some of the design decisions are not the most appropriate for its use in peer-to-peer communications, showing several limitations to secure ad-hoc networks. We have found the same drawbacks when trying to adapt the IEEE 802.1X model for providing end-to-end security at the link layer between Ethernet peers. We have identified the shortcomings of the standardized solution for its application in securing peer-to-peer communications, and we propose some modifications to the IEEE 802.1X model that help to overcome those limitations. These modifications have been implemented and functionally tested for establishing secure communications between end stations in Ethernet networks.