The DOI matches its Crossref record.
A Study on MITM (Man in the Middle) Vulnerability in Wireless Network Using 802.1X and EAP
Abstract
The security of wireless LAN is being strengthened through a combination of EAP with an 802.1X-based authentication server, with 802.11i as the standard. As such a security technique effectively defends the existing WEP or protocol vulnerabilities, another approach is needed to prove the vulnerability of the wireless LAN. This paper proposes the wireless MITM (man in the middle) framework, which can actively prove the vulnerability of MITM by applying the MITM technique in the wireless LAN environment, whose security is applied using 802.1X and EAP. It also describes the designing of the required functions and modules. This paper proposes that it is possible to collect the wireless LAN authentication information of the unauthorized user using the designed wireless MLTM-framework under the EAP-MD5 and EAP-TTLS environment.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“For example, in the generic rogue access point attack, the user is deceived by merely seeing it on the list of available WiFi networks [Hwang et al. 2008].”
From A Taxonomy of Attacks and a Survey of Defence Mechanisms for Semantic Social Engineering Attacks (2016) · cites this paper as Hwang et al. 2008
In the citing paper
“In man-in-the-middle rogue access points, the attacker adjusts the user configurable service set identifier (SSID) to match that of a legitimate access point in the environment in which it has been installed [Hwang et al. 2008].”
From A Taxonomy of Attacks and a Survey of Defence Mechanisms for Semantic Social Engineering Attacks (2016) · cites this paper as Hwang et al. 2008
Citations
Cites
No references could be resolved yet.
Research works printed but not linked: 13
- blunk, 1998, PPP Extensible Authentication Protocol(EAP) IETF RFC 2284
- dierks, 1999, The TLS protocol version 1 0 IETF RFC 2246
- calhoun, 2000, PPP EAP TLS Authentication Protocol IETF RFC 2794
- funk, 2002, EAP Tunneled TLS Authentication Protocol
- blunk, 1998, RFC 2284 - PPP Extensible Authentication Protocol (EAP)
- bellardo, 0, 802.11 Denial of Service Attacks: Real Vulnerabilities and Practical Solutions, Proc USENIX
- 0, IEEE 802 1 Working Group 802 1X - port based network access control
- 2004, Wi-Fi Alliance
- 10.17487/rfc2865 · DOI
- 2002, Foundary NETWORKS, Using IEEE 802 1x to enhance network security
- fluhrer, 2001, Weakness in the key scheduling algorithm of RC4, Eighth Annual Workshop on Selected Areas in Cryptography, 10.1007/3-540-45537-X_1 · DOI
- walker, 2000, Unsafe at Any Key Size: an Analysis of the WEP Encapsulation, Tech report 03628E IEEE 802 11 Committee
- simon, 2000, RADIUS Master Session Key Attribute
Cited by
A Taxonomy of Attacks and a Survey of Defence Mechanisms for Semantic Social Engineering Attacks
Heartfield, R., & Loukas, G. (2016) · ACM Computing Surveys · doi:10.1145/2835375 · Cited by 202
Metadata
- Authors
- Hwang, H., Jung, G., Sohn, K., & Park, S.
- Affiliations
- Electronics and Telecommunications Research Institute (KR)
- Venue
- 2008 International Conference on Information Science and Security (ICISS 2008)
- Publisher
- IEEE
- Published
- 2008-01
- Pages
- 164-170
- OpenAlex
- W2160395257
- Cited by
- 69
- References
- 0
- Citations by year
- 2026: 1 · 2025: 3 · 2024: 3 · 2022: 3 · 2021: 2 · 2020: 1 · 2019: 2 · 2018: 8 · 2017: 3 · 2016: 7 · 2015: 5 · 2014: 7 · 2013: 6 · 2012: 8
- FWCI
- 2.31
- Type
- conference paper
- Language
- en
- Open access
- closed
- Locations
- International Conference on Information Science and Security (ICISS) (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Advanced Authentication Protocols Security
- Physical Sciences › Computer Science › Computer Networks and Communications › Wireless Networks and Protocols
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Keywords
- man-in-the-middle attacks, wireless LAN security, IEEE 802.1X, Extensible Authentication Protocol, EAP-TLS, wireless network authentication, 802.11i
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
