CS4138 - Mobile and Wireless Security

Winter 2--5 (planned)
Instructor - Prof. George Dinolt

(last updated: June 16, 2004 )

Overview

The application of Mobile and Wireless devices has grown rapidly in military and commercial environments. The functionality and reliability of these devices has grown tremendously.  The mobile and wireless nature of these devices raise new and important security challenges not usually present in static environments. This course will address these questions including the security functionality, protocol and assurance issues associated with this emerging technology.

PREREQUISITES:  CS4137 Wireless Data Services, CS3600 Information Assurance: Introduction to Computer Security, CS3690 Network Security.

Topics

• Review of Wireless Mobile Environments and Security Goals
  

• Types of Wireless Networks
• System Architectures
• Security Goals including Identification, Authentication, Compromise Protection, Integrity Protection, Provision of Service
• Intro to Wireless Security Threats

• Wireless Mobile Device Specific Threats and Vulnerabilities

• Eavesdropping
• Jamming
• Injection/Replay
• Rouge Clients
• Roaming issues
• Information Leakage at all Levels

• Security Mechanisms in Wireless Mobile Environments

• Physical Security
• Security applied at Protocol and Application Layers
• Encryption in Wireless Mobile Devices
• Device, Network and User  Mutual Authentication,
• Application of Biometric Approaches

• Security Protocols used in Wireless Devices

• 802.1x
• 802.11,
• IS-95
• Mobile IP and IPSEC
• Application Layer Security

• Attacks on Protocols in Wireless Mobile Environments

• 802.11
• Other Security Protocol attacks

• Current Security Architectures in Wireless Mobile Environment
  
• Security Issues and Architectural Approaches in Dynamic Wireless Networking Environments
  
• Student Project Reports

  Books

No textbook currently exists for this course. We plan to use the following books as reference and take advantage of the growing number of technical papers and reports in this field:

• Wireless Security, Merritt Maxim, David Pollino, McGraw Hill, 2002
• Wireless Security Essentials, Russel Dean Vines, John Wiley, 2003