Wi-Fi Alliance Takes Wraps Off Of New Security

Welcome Guest. | Log In| Register | Membership Benefits

October 31, 2002 (2:49 PM EST)

Wi-Fi Alliance Takes Wraps Off Of New Security

The Wi-Fi Alliance unveiled new security specifications for 802.11b networks, replacing the easy-to-circumvent Wireless Encryption Protocol (WEP) that's now standard.

The standards body said Thursday it plans to make the new technology, called Wireless Protected Access (WPA), optional in February and then mandatory about six months later. Most Wi-Fi products will be made WPA-compliant by upgrading software and firmware.

The new standards are an interim fix, while a tough new security standard called 802.11 is being worked out by a task group within the IEEE 802.11 working group, which is in charge of both IEEE 802.11b and 802.11a standards. However, 802.11i isn't expected to be ratified until Sept. 2003.

The standards are needed because fears over Wi-Fi security are slowing enterprise deployments. Wi-Fi signals extend beyond the office, into neighboring buildings, and pubic areas, streets, and parking lots.Wi-Fi enthusiasts have taken to mapping out the availability of these Wi-Fi "hotspots," along with whether the hotspots are secured, in an activity called "wardriving."

Most of these enthusiasts are benign, mapping the hotspots just for the sake of doing it, or to be able to access e-mail and the Web without disrupting the hotspot owner's use of his wireless network. But unsecured hotspots could easily be used to launch attacks.