Preface
Part I. 802.11 Security Basics
1. A Wireless World
What Is Wireless?
Radio Transmission
Inherent Insecurity
802.11
Structure of 802.11 MAC
WEP
Problems with WEP
Is It Hopeless?
2. Attacks and Risks
An Example Network
Denial-of-Service Attacks
Man-in-the-Middle Attacks
Illicit Use
Wireless Risks
Knowing Is Half the Battle
Part II. Station Security
3. Station Security
Client Security Goals
Audit Logging
Security Updates
4. FreeBSD Station Security
FreeBSD Client Setup
5. Linux Station Security
Linux Client Setup
Kernel Configuration
OS Protection
Audit Logging
Secure Communication
6. OpenBSD Station Security
OpenBSD Client Setup
Kernel Configuration
OS Protection
Audit Logging
7. Mac OS X Station Security
Mac OS X Setup
OS Protection
Audit Logging
8. Windows Station Security
Windows Client Setup
OS Protection
Audit Logging
Secure Communication
Part III. Access Point Security
9. Setting Up an Access Point
General Access Point Security
Setting Up a Linux Access Point
Setting Up a FreeBSD Access Point
Setting Up an OpenBSD Access Point
Taking It to the Gateway
Part IV. Gateway Security
10. Gateway Security
Gateway Architecture
Secure Installation
Firewall Rule Creation
Audit Logging
11. Building a Linux Gateway
Laying Out the Network
Building the Gateway
Configuring Network Interfaces
Building the Firewall Rules
MAC Address Filtering
DHCP
DNS
Static ARP
Audit Logging
Wrapping Up
12. Building a FreeBSD Gateway
Building the Gateway
Building the Firewall Rules
Rate Limiting
DHCP
DNS
Static ARP
Auditing
13. Building an OpenBSD Gateway
Building the Gateway
Building the Firewall Rules
Rate Limiting
DHCP
DNS
Static ARP
Auditing
14. Authentication and Encryption
Portals
IPsec VPN
802.1x
15. Putting It All Together
Pieces of a Coherent System
User Knowledge
Looking Ahead
Index |
