The DOI matches its Crossref record; 9 of the 9 references it cites were found in a registry or an index.
Practical attacks against WEP and WPA
Open accessAbstract
In this paper, we describe two attacks on IEEE 802.11 based wireless LANs. The first attack is an improved key recovery attack on WEP, which reduces the average number of packets an attacker has to intercept to recover the secret key. The second attack is (according to our knowledge) the first practical attack on WPA secured wireless networks, besides launching a dictionary attack when a weak pre-shared key (PSK) is used. The attack works if the network is using TKIP to encrypt the traffic. An attacker, who has about 12-15 minutes access to the network is then able to decrypt an ARP request or response and send 7 packets with custom content to network.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Lecture Notes in Computer Science 1205
(1999) · Industrial Robot: An International Journal · doi:10.1108/ir.1999.04926fae.001 · Cited by 38,662
Wireless LAN medium access control (MAC) and physical layer (PHY) specifications
Piscataway, N. (1996) · Medical Entomology and Zoology · Cited by 2,999
Lecture Notes in Computer Science 1867
Baldwin, J., Martin, T., & Tzanavari, A. (2000) · Cited by 1,629
Weaknesses in the Key Scheduling Algorithm of RC4
Fluhrer, S., Mantin, I., & Shamir, A. (2001) · Lecture Notes in Computer Science · doi:10.1007/3-540-45537-x_1 · Cited by 1,043
Breaking 104 Bit WEP in Less Than 60 Seconds
Tews, E., Weinmann, R.-P., & Pyshkin, A. (2007) · Lecture Notes in Computer Science · doi:10.1007/978-3-540-77535-5_14 · Cited by 199
Self-citationThe final nail in WEP's coffin
Bittau, A., Handley, M., & Lackey, J. (2006) · 2006 IEEE Symposium on Security and Privacy (S&P'06) · doi:10.1109/sp.2006.40 · Cited by 165
A key recovery attack on the 802.11b wired equivalent privacy protocol (WEP)
Stubblefield, A., Ioannidis, J. P. A., & Rubin, A. D. (2004) · ACM Transactions on Information and System Security · doi:10.1145/996943.996948 · Cited by 110
Passive–Only Key Recovery Attacks on RC4
Serge Vaudenay, B., & Vuagnoux, M. (2007) · Lecture notes in computer science · doi:10.1007/978-3-540-77360-3_22 · Cited by 63
Attacks on the WEP protocolPreprint
Tews, E. (2007) · IACR Cryptology ePrint Archive · Cited by 28
Self-citation
Cited by
Key Reinstallation Attacks: Forcing Nonce Reuse in WPA2
Vanhoef, M., & Piessens, F. (2017) · Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/3133956.3134027 · Cited by 380
HTTP Strict Transport Security (HSTS)
Hodges, J., Jackson, C., & Barth, A. (2012) · doi:10.17487/rfc6797 · Cited by 198
A Comprehensive IoT Attacks Survey based on a Building-blocked Reference Model
Akram, H., Konstantas, D., & Mahyoub, M. (2018) · International Journal of Advanced Computer Science and Applications · doi:10.14569/ijacsa.2018.090349 · Cited by 193
S2M: A Lightweight Acoustic Fingerprints-Based Wireless Device Authentication Protocol
Chen, D., Zhang, N., Qin, Z., Mao, X., Qin, Z., Shen, X., & Li, X.-Y. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2016.2619679 · Cited by 164
Advanced Wi-Fi attacks using commodity hardware
Vanhoef, M., & Piessens, F. (2014) · Proceedings of the 30th Annual Computer Security Applications Conference · doi:10.1145/2664243.2664260 · Cited by 152
Metadata
- Authors
- Tews, E., & Beck, M.
- Venue
- Proceedings of the second ACM conference on Wireless network security
- Publisher
- ACM
- Published
- 2009-03-16
- Pages
- 79-86
- OpenAlex
- W2139985879
- Cited by
- 257
- References
- 9
- FWCI
- 18.80
- Type
- conference paper
- Language
- en
- Open access
- green
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
How to cite
Cite CoChat for the checks on this page, and the paper for its own findings.
- This page
- CoChat. (2026). Citation check: Practical attacks against WEP and WPA. https://app.cochat.ai/papers/10.1145/1514274.1514286
- The paper
- Tews, E., & Beck, M. (2009). Practical attacks against WEP and WPA. Proceedings of the second ACM conference on Wireless network security. https://doi.org/10.1145/1514274.1514286
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
