7.1 In IEEE 802.11, open system authentication simply consists of two communications. An authentication is requested by the client, which contains the station ID (typically the MAC address). This is followed by an authentication response from the AP/router containing a success or failure message. An example of when a failure may occur is if the client's MAC address is explicitly excluded in the AP/router configuration. a. What are the benefits of this authentication scheme? b. What are the security vulnerabilities of this authentication scheme?

7.1 In IEEE 802.11, open system authentication simply consists of two communications. An authentication is requested by the client, which contains the station ID (typically the MAC address). This is followed by an authentication response from the AP/router containing a success or failure message. An example of when a failure may occur is if the client's MAC address is explicitly excluded in the AP/router configuration. a. What are the benefits of this authentication scheme? b. What are the security vulnerabilities of this authentication scheme?

Systems Architecture

7th Edition

ISBN:9781305080195

Author:Stephen D. Burd

Publisher:Stephen D. Burd

Chapter13: Internet And Distributed Application Services

Section: Chapter Questions

Problem 15VE

See similar textbooks

Similar questions

In IEEE 802.11, two-way communication is used to authenticate an open system. In order to authenticate the client, the server must give the station ID (typically the MAC address). Response to the client's previous request is either a successful or failed authentication response from the access point/router. An error may arise if, for example, an AP/router configuration does not include the client's MAC address.In what ways is it advantageous to use this kind of authentication scheme?In what ways does this authentication technique have security vulnerabilities that might be mitigated?
7.1 In IEEE 802.11, open system authentication is accomplished via a simple two-way communication. The client requests authentication, which includes the station ID, which is provided by the server (typically the MAC address). A successful or unsuccessful authentication response from the AP/router is received in response to the previous request from the client. For instance, if the client's MAC address has been expressly omitted from the AP/router setup, a failure may occur.a. What are the advantages of using this kind of authentication scheme?b. What are the security flaws in this authentication method and how may they be mitigated?
We explore whether either UDP or TCP offers any level of end-point authentication in this problem. a. Consider a server that accepts a request via UDP and responds via UDP (for example, as done by a DNS server). Where would the server give its answer if a client with IP address X spoofs it with address Y? b. Assume a server receives a SYN with IP source address Y and responds with SYNACK. The server then receives an ACK with IP source address Y and the right acknowledgmentamount. Assuming the server selects a random initial sequence number and there is no "man-in-the-middle," how can the server be confident that the recipient is really at Y (and not at any other address X that spoofs Y)?
22. A datagram subnet allows routers to drop packets whenever they need to. The probability of a router discarding a packet is p. Consider the case of a source host connected to the source router, which is connected to the destination router, and then to the destination host. If either of the routers discards a packet, the source host eventually times out and tries again. If both host-router and router-router lines are counted as hops, what is the mean number of a. (a) hops a packet makes per transmission? b. (b) transmissions a packet makes? (c) hops required per received packet?
22. A datagram subnet allows routers to drop packets whenever they need to. The probability of a router discarding a packet is p. Consider the case of a source host connected to the source router, which is connected to the destination router, and then to the destination host. If either of the routers discards a packet, the source host eventually times out and tries again. If both host-router and router-router lines are counted as hops, what is the mean number of a. (a) hops a packet makes per transmission? b. (b) transmissions a packet makes? c. (c) hops required per received packet?
Scenario There is design1.csv file attached to this router interfaces ip_on_interfaces R1 s1, fa1 10.0.2.1, 192.168.1.3 R2 s0 10.0.2.2, R3 s0, Fa0, s1 10.0.2.3, 192.168.4.3, 192.168.5.5 R4 s0, s2 10.0.2.4, 192.168.8.8, Write a Python script to generate configuration files automatically for each router in the first column. Example, for router R1, the configuration file name should be “r1_config.cfg” and so on. The configuration commands for router R1 are as follows, the other routers’ commands are similar, according to the design file: #configure terminal # hostname R1 # enable secret Pas$w0rD # interface s1 # ip address 10.0.2.1 # no shutdown # interface fa0/1 # ip address 192.168.1.3 # no shutdown # end
Assume that a client can use UDP to obtain a file from a distant server at a known address. The client initiates the request for a file name, and the server responds with a sequence of data packets containing various file components. To ensure delivery reliability, the client and server use a stop-and-wait protocol. Is there anything else wrong with this protocol aside apparent performance issues? Consider the possibility of process failure.
QUESTION 19 Suppose a process in Host C has a UDP socket with port number 4320. Suppose both Host A and Host B each send a UDP segment to Host C with destination port number 4320. Then both of these segments will be directed to the same socket with port number 4320 at Host C True False QUESTION 20 With TCP’s flow control mechanism, where the receiver tells the sender how much free buffer space it has (and the sender always limits the amount of outstanding, unACKed, in-flight data to less than this amount), it is not possible for the sender to send more data than the receiver has room to buffer. True False
Computer Science Before the introduction of IEEE 802.11i, the security scheme for IEEE 802.11 was Wired Equivalent Privacy (WEP). Assume that the initialization vector (IV) is not used in WEP. Instead, RC4 is applied using K as input and producing s as output. Assume RC4(K, n) is applied for each packet and that all packets have the same length. If an attacker intercepts a single packet with ciphertext C1 and also has a known plaintext/ciphertext pair (P2, C2). Show how the attacker can find the plaintext P1. You can make use of an example by assuming some random data is being encrypted.
Write a program to simulate the behaviour of the CSMA/CD protocol over Ethernet when there are N stations ready to transmit while a frame is being transmitted your program should report the times when euch station successfully starts sending its frame. Assume that a clock tick occurs once every slot time (57.2 usec) and a collision detection and sending of a jamming sequence. takes one slot time. All frames are the maximum length allowed
True or false? Suppose Host A is sending Host B a large file over a TCP connection. The number of unacknowledged bytes that A sends cannot exceed the size of the receive buffer.
Let's pretend a computer sends a packet to another computer on the Internet at the network layer. A problem has occurred with the packet's logical destination address. Where should I send the package? When this occurs, how will the original computer find out?