7.1 In IEEE 802.11, open system authentication is accomplished via a simple two-way communication. The client requests authentication, which includes the station ID, which is provided by the server (typically the MAC address). A successful or unsuccessful authentication response from the AP/router is received in response to the previous request from the client. For instance, if the client's MAC address has been expressly omitted from the AP/router setup, a failure may occur. a. What are the advantages of using this kind of authentication scheme? b. What are the security flaws in this authentication method and how may they be mitigated?

7.1 In IEEE 802.11, open system authentication is accomplished via a simple two-way communication. The client requests authentication, which includes the station ID, which is provided by the server (typically the MAC address). A successful or unsuccessful authentication response from the AP/router is received in response to the previous request from the client. For instance, if the client's MAC address has been expressly omitted from the AP/router setup, a failure may occur. a. What are the advantages of using this kind of authentication scheme? b. What are the security flaws in this authentication method and how may they be mitigated?

Systems Architecture

7th Edition

ISBN:9781305080195

Author:Stephen D. Burd

Publisher:Stephen D. Burd

Chapter13: Internet And Distributed Application Services

Section: Chapter Questions

Problem 15VE

See similar textbooks

Similar questions

In IEEE 802.11, two-way communication is used to authenticate an open system. In order to authenticate the client, the server must give the station ID (typically the MAC address). Response to the client's previous request is either a successful or failed authentication response from the access point/router. An error may arise if, for example, an AP/router configuration does not include the client's MAC address.In what ways is it advantageous to use this kind of authentication scheme?In what ways does this authentication technique have security vulnerabilities that might be mitigated?
R6Fragmentation of an IP datagram takes place if its size is larger than the MTU of the subnet over which the datagram will be routed. Most IP datagram reassembly algorithms have a timer to avoid having a lost fragment tie up reassembly buffers forever. Suppose a datagram is fragmented into four fragments. The first three fragments arrive, but the last one is delayed. Eventually the timer goes off and the three fragments in the receiver's memory are discarded. A little later, the last fragment stumbles in. What should be done with it?
Most IP datagram reassembly algorithms have a timer to avoid having a lost fragment tie up reassembly buffers forever. Suppose that a datagram is fragmented into four fragments. The first three fragments arrive, but the last one is delayed. Eventually, the timer goes off and the three fragments in the receiver's memory are discarded. A little later, the last fragment stumbles in. What should be done with it?
For NAT Network Address Translation Scenario: Jenny Bello is a small business owner selling and making customized computer peripherals. She has been finding it difficult to track her sales and inventories, however recently after an expert's advice, she adopted a Point of Sale (PoS) server. So, she can now track her sales and inventories at the store. However, she ran into another issue, the server can only be accessed within the store, because it has been assigned a private IPv4 address, it is not publicly accessible via the Internet. a) Why is not having the PoS server accessible over the Internet a problem for the business? b) What caused this problem? c) Propose a solution for the problem and explain how the solution works.
Consider a client connecting to a web server via a router as shown in Fig.Q2. Client A sends a request to the server to retrieve a 7.5 Mbytes file. Given that the segment size is 50 Kbytes, the round trip time (RTT) between the server and client is 10 ms, the initial slow-start threshold is 16 and the client's buffer always has a storage space of 1 Mbytes. Assume that TCP Reno is used, there is no loss during transmission and the headers of protocols are ignored. 400 Mbps 200 Mbps 400 Mbps Link a Link b Link c Client Web Server Fig.Q2 (a) Describe how the value of sending window changes as a function of time (in units of RTT) during the whole connection time. 2.
Three-way handshake is used by a TCP client and a TCP server to establish a connection, as illustrated below: 1st: client:port1 -> server:port2, SYN 2nd: server:port2 -> client:port1, SYNACK 3rd: client:port1 -> server:port2, ACK When this client is performing scanning attacks, it will generated a large number of failed connections. In each failed connection, the three-way handshake fails to complete. People commonly use SYN together with the absence of its corresponding SYNACK in this same TCP session to identify whether this connection is failed. By investigating the failed connections, an engineer finds that in legitimate/benign cases, if the server does not return SYNACK to the client, the client will not send the ACK packet after SYNACK (e.g., the 3rd packet above). Therefore, this engineer suggests that we can count the failed connections based on the following rules without considering SYNACK:
Three-way handshake is used by a TCP client and a TCP server to establish a connection, as illustrated below: 1st: client:port1 -> server:port2, SYN 2nd: server:port2 -> client:port1, SYNACK 3rd: client:port1 -> server:port2, ACK When this client is performing scanning attacks, it will generated a large number of failed connections. In each failed connection, the three-way handshake fails to complete. People commonly use SYN together with the absence of its corresponding SYNACK in this same TCP session to identify whether this connection is failed. By investigating the failed connections, an engineer finds that in legitimate/benign cases, if the server does not return SYNACK to the client, the client will not send the ACK packet after SYNACK (e.g., the 3rd packet above). Therefore, this engineer suggests that we can count the failed connections based on the following rules without considering SYNACK: If a client:port1 sends…
Keep in mind that packet reordering and reassembly occur throughout the transport phase of the TCP/IP protocol suite's operation. It is possible for a firewall to operate at a lower abstraction level, such as the Internet or data layer. Any information about a traffic stream that is out of order or has been deleted will be lost by a stateful inspection firewall that is using stateful inspection.
Kerberos is a protocol that is based around Needham-Schroeder protocol for many to many authentications. Now answer the following questions. (Use necessary diagrams to justify your answers) i) Explain why the password of the user is not sent over the network and instead session keys are generated and shared in the Kerberos protocol. ii) The information in a TGT (Ticket Granting Ticket) is encrypted so the client cannot access the information in the TGT. However, all information in the ticket is already known to the client. Why is it still necessary to encrypt it? iii) Describe the working mechanism of how a ticket is generated between the client and server by the TGS (Ticket Granting Server) and how it is used for client-server communication.
Both UDP and TCP use port numbers to identify the destination entity when delivering a message. Give two reasons for why these protocols invented a new abstract ID (port numbers), instead of using process IDs, which already existed when these protocols were designed.
TCP / IP uses the client-server communication model, in which a user or computer (a client) receives a service (such as sending a web page) from another computer (a server) on the network. In short, the TCP / IP protocol suite is classified as stateless, which means that each client request is considered new because it has nothing to do with previous requests. Being stateless, network routes are released so that they can be used continuously. Answer the following questions briefly. How does resource reservation work in the TCP / IP model? Which TCP / IP layer is responsible to reserve resources across a network using the TCP / IP model? What protocol assigns an IP address to the client connected to the Internet? Checksum is used by various protocols on the Internet, but not at the one of TCP / IP Explain.
Q.7. Design and implement a client/ Multi-threaded Server Chat application where a set of clients are able to send their request to the Multithreaded Server. In this application, messages that are exchanged between client and server, must be encrypted using AES encryption algorithm. After receiving the message, each party (client or server) perform decryption operation and show the content of message on the terminal.