The DOI matches its Crossref record.
Establishing wireless robust security networks: a guide to IEEE 802.11i
Abstract
The Information Technology Laboratory (ITL) at the National Institute of Standards and Technology (NIST) promotes the U.S. economy and public welfare by providing technical leadership for the nation's measurement and standards infrastructure.ITL develops tests, test methods, reference data, proof of concept implementations, and technical analysis to advance the development and productive use of information technology.ITL's responsibilities include the development of technical, physical, administrative, and management standards and guidelines for the cost-effective security and privacy of sensitive unclassified information in Federal computer systems.This Special Publication 800-series reports on ITL's research, guidance, and outreach efforts in computer security and its collaborative activities with industry, government, and academic organizations.Certain commercial entities, equipment, or materials may be identified in this document in order to describe an experimental procedure or concept adequately.Such identification is
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Network segmentation is considered a good security practice and can be achieved by implementing BP1-CPNI, IEC 62351, and NIST 800-82.
“Since network segmentation [110,111] is considered as a good security practice, it can be achieved by implementing BP1-CPNI [109], IEC 62351 [112], and NIST 800-82.”
From Industrial IoT, Cyber Threats, and Standards Landscape: Evaluation and Roadmap (2021) · cites this paper as [111]
Since the MC-MitM attacker does not delete the original security association or create a new connection using a Wi-Fi passphrase, the client and real AP continue to maintain their security association and retain details about PMK and association identifiers in state tables stored in the cache of their Wi-Fi chips.
“As mentioned previously, since the MC-MitM attacker does not delete the original security association between the client and real AP or does not create a new connection using a Wi-Fi passphrase, the client and real AP continue to maintain their security association (current state machine) and retain details about PMK (a hash value derived from Wi-Fi passphrase and SSID) and association identifiers”
From Multi-Channel Man-in-the-Middle attacks against protected Wi-Fi networks: A state of the art review (2022) · cites this paper as Frankel et al., 2007
Citations
Cited by
Sorted by citations
Guide to Industrial Control Systems (ICS) Security
Stouffer, K., Pillitteri, V., Lightman, S., Abrams, M., & Hahn, A. (2015) · doi:10.6028/nist.sp.800-82r2 · Cited by 1,377
A Survey of Man in the Middle Attacks
Conti, M., Dragoni, N., & Lesyk, V. (2016) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2016.2548426 · Cited by 724
“Frankel et al. [6] described MITM attack as one of the major threats against network security.”
BackgroundByzantine Attack and Defense in Cognitive Radio Networks: A Survey
Zhang, L., Ding, G., Wu, Q., Zou, Y., Han, Z., & Wang, J. (2015) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2015.2422735 · Cited by 247
“Generally, attackers aim to deteriorate performance of wireless networks in terms of confidentiality, integrity, availability, and access control [2].”
BackgroundIndustrial IoT, Cyber Threats, and Standards Landscape: Evaluation and Roadmap
Dhirani, L. L., Armstrong, E., & Newe, T. (2021) · Sensors · doi:10.3390/s21113901 · Cited by 172
“Since network segmentation [110,111] is considered as a good security practice, it can be achieved by implementing BP1-CPNI [109], IEC”
MethodPadgette, J., Bahr, J., Batra, M., Holtmann, M., Smithbey, R., Chen, L., & Scarfone, K. A. (2017) · doi:10.6028/nist.sp.800-121r2 · Cited by 86
Self-citationProtecting controlled unclassified information in nonfederal systems and organizations
Ross, R., Pillitteri, V. Y., Dempsey, K. L., Riddle, M., & Guissanie, G. (2020) · doi:10.6028/nist.sp.800-171r2 · Cited by 73
Multi-Channel Man-in-the-Middle attacks against protected Wi-Fi networks: A state of the art review
Thankappan, M., Rifà-Pous, H., & Garrigues, C. (2022) · Expert Systems with Applications · doi:10.1016/j.eswa.2022.118401 · Cited by 59
D-ARP: An Efficient Scheme to Detect and Prevent ARP Spoofing
Morsy, S. M., & Nashat, D. (2022) · IEEE Access · doi:10.1109/access.2022.3172329 · Cited by 56
“There are two general ways in which an ARP Poisoning attack can be accomplished: The attacker can either wait to see ARP requests for a specific target and send a reply, or transmit a gratuitous ARP reply which is an unsolicited broadcast packet which means it is possible to receive a reply without a request matched w…”
BackgroundThe insecurity of wireless networks
Sheldon, F. T., Weber, J. M., Yoo, S.-M., & Pan, W. D. (2012) · IEEE Security & Privacy Magazine · doi:10.1109/msp.2012.60 · Cited by 45
Microgrid Cyber Security Reference Architecture (V.1.0)
Sandia National Labs., A., Veitch, C., (NNSA), U. N. N. S. A., Henry, J., Richardson, B., & Hart, D. (2013) · doi:10.2172/1090210 · Cited by 45
Guide for security-focused configuration management of information systems
Johnson, A., Dempsey, K. L., Ross, R., Gupta, S., & Bailey, D. (2015) · doi:10.6028/nist.sp.800-128 · Cited by 45
Evil twins and WPA2 Enterprise: A coming security disaster?
Bartoli, A., Medvet, E., & Onesti, F. (2018) · Computers & Security · doi:10.1016/j.cose.2017.12.011 · Cited by 39
An Enhanced WLAN Security System With FPGA Implementation for Multimedia Applications
Hayajneh, T. S., Ullah, S., Mohd, B. J., et al. (2015) · IEEE Systems Journal · doi:10.1109/jsyst.2015.2424702 · Cited by 38
“11i standard to specify the interrelations of the keys [5].”
BackgroundInfluentialClassification and analysis of security attacks in WSNs and IEEE 802.15.4 standards : A survey
Sharma, M., Tandon, A., Narayan, S., et al. (2017) · International Conference on Advances in Computing, Communication & Automation (ICACCA) · doi:10.1109/icaccaf.2017.8344727 · Cited by 31
“[26] presented MITM attack as the major attack against network security.”
BackgroundTraffic Data Classification to Detect Man-in-the-Middle Attacks in Industrial Control System
Lan, H., Zhu, X., Sun, J., et al. (2020) · International Conference on Dependable Systems and Their Applications (DSA) · doi:10.1109/dsa.2019.00067 · Cited by 26
“[7], where a malicious third party secretly takes control of the communication channel between two or more endpoints.”
BackgroundComparative Analysis of Wireless Security Protocols: WEP vs WPA
Sarı, A., & Karay, M. (2015) · International Journal of Communications Network and System Sciences · doi:10.4236/ijcns.2015.812043 · Cited by 24
A Survey on Wi-Fi Protocols: WPA and WPA2
Khasawneh, M., Kajman, I., Alkhudaidy, R., & Althubyani, A. N. (2014) · Communications in computer and information science · doi:10.1007/978-3-642-54525-2_44 · Cited by 23
Security Analysis and Authentication Improvement for IEEE 802.11i Specification
Xing, X., Shakshuki, E., Benoit, D. G., & Sheltami, T. (2008) · Globecom · doi:10.1109/glocom.2008.ecp.365 · Cited by 21
“As the definition depicted in [5], an RSNA is a logical connection between communicating IEEE 802.”
BackgroundSecurity and Privacy Controls for Information Systems and OrganizationsPreprint
Joint Task Force Transformation Initiative (2020) · doi:10.6028/nist.sp.800-53r5-draft · Cited by 22
Padgette, J., Bahr, J., Batra, M., Holtmann, M., Smithbey, R., Chen, L., & Scarfone, K. A. (2022) · doi:10.6028/nist.sp.800-121r2-upd1 · Cited by 16
Self-citationA link-layer authentication and key agreement scheme for mobile public hotspots in NEMO based VANET
Taha, S., & Shen, X. (2012) · Globecom · doi:10.1109/glocom.2012.6503244 · Cited by 15
“4 shows the computation time of CL-AKA scheme compared with captive portal [8], dummy authentication [16], and EAP based WPA2 [9].”
BackgroundMethodFast and seamless handover for secure mobile industrial applications with 802.11r
Tabassam, A. A., Trsek, H., Heiss, S., et al. (2009) · Conference on Local Computer Networks · doi:10.1109/lcn.2009.5355069 · Cited by 15
An AEAD cryptographic framework and TinyAEAD construct for secure WSN communication
Adekunle, A. A., & Woodhead, S. R. (2012) · Wireless Advanced (WiAd) · doi:10.1109/wiad.2012.6296560 · Cited by 12
Weaving a New 'Net: A Mesh-Based Solution for Democratizing Networked Communications
Sinnreich, A., Graham, N., & Trammell, A. (2011) · The Information Society · doi:10.1080/01972243.2011.607056 · Cited by 11
“…must address potential interference from the environment, and jamming attempts from totalitarian governments and other malicious actors, because, as Frankel et al. (2007) establish, the current standard from the Institute of Electrical and Electronics Engineers (IEEE; 802.11) offers no defense…”
BackgroundInfluentialAn Overview of Primary User Emulation Attack in Cognitive Radio Networks
Gupta, I., & Sahu, O. P. (2018) · International Conference on Computing Methodologies and Communication (ICCMC) · doi:10.1109/iccmc.2018.8487476 · Cited by 11
Enhancement of Passive MAC Spoofing Detection Techniques
AbuSamra, A. A., & Abed, R. (2010) · International Journal of Advanced Computer Science and Applications · doi:10.14569/ijacsa.2010.010518 · Cited by 11
THE NETWORK AND ITS ROLE IN DIGITAL IMAGING AND COMMUNICATIONS IN MEDICINE IMAGING
Ballance, D. W. (2008) · Veterinary Radiology & Ultrasound · doi:10.1111/j.1740-8261.2007.00330.x · Cited by 11
“Security built into most wireless access points is generally weak and easy to break with the right tools; today, only Wifi-Protected Access (WPA2) is effective.(8) Without this technology, the broadcast between a wireless computer and the access point is unencrypted, allowing a listener to extract any data broadcast b…”
BackgroundProtecting Controlled Unclassified Information in Nonfederal Systems and Organizations
Ross, R., & Pillitteri, V. Y. (2023) · doi:10.6028/nist.sp.800-171r3.ipd · Cited by 13
RetractedDesigning of User Authentication Based on Multi-factor Authentication on Wireless Networks
Rusdan, M. (2020) · Journal of Advanced Research in Dynamical and Control Systems · doi:10.5373/jardcs/v12i1/20201030 · Cited by 9
The state of the art of risk assessment and management for information systems
Liang, L., Wang, R., Song, J., et al. (2013) · International Conference on Information Assurance and Security (IAS) · doi:10.1109/isias.2013.6947735 · Cited by 8
Addressing the vulnerability of the 4-way handshake of 802.11i
Zhao, S., Shoniregun, C. A., & Imafidon, C. (2008) · International Conference on Digital Information Management · doi:10.1109/icdim.2008.4746729 · Cited by 8
A System and Method for Authentication in Wireless Local Area Networks (WLANs)
Pandey, A., Pant, P. K., & Tripathi, R. C. (2016) · Proceedings of the National Academy of Sciences India Section A Physical Sciences · doi:10.1007/s40010-015-0241-1 · Cited by 8
Research and Prevention of Rogue AP Based MitM in Wireless Network
Cai, M., Wu, Z., & Zhang, J. (2014) · International Conference on P2P, Parallel, Grid, Cloud and Internet Computing (3PGCIC) · doi:10.1109/3pgcic.2014.105 · Cited by 7
“1X uncontrolled port on the authenticator, non-EAP data frames are passed or blocked via the controlled port, depending upon the result of authentication(which includes EAP)[6].”
BackgroundCase Studies of Attacks over Adaptive Modulation Based Tactical Software Defined Radios
Moura, D., da Silva, F. A. B., & Galdino, J. F. (2012) · Journal of Computer Networks and Communications · doi:10.1155/2012/703642 · Cited by 7
Fast and secure authentication in IEEE 802.11i wireless LAN
Syahputri, R., & Sriyanto, S. (2012) · International Conference on Uncertainty Reasoning and Knowledge Engineering · doi:10.1109/urke.2012.6319534 · Cited by 5
Security challenges in pervasive wireless medical systems and devices
Kyaw, A. K., & Cusack, B. O. (2014) · High Capacity Optical Networks and Emerging/Enabling Technologies (HONET) · doi:10.1109/honet.2014.7029386 · Cited by 5
Information Assurance Directorate
Klingensmith, W. (2024) · doi:10.18260/1-2--25310 · Cited by 5
Deauthentication and Disassociation Detection and Mitigation Scheme Using Artificial Neural Network
Abdallah, A. E., Razak, S. B. A., & Ghaleb, F. A. A. (2019) · Advances in intelligent systems and computing · doi:10.1007/978-3-030-33582-3_81 · Cited by 4
Security in Wireless Mesh Networks
Lee, C.-W. (2013) · Wireless Network Security · doi:10.1007/978-3-642-36511-9_9 · Cited by 4
Intrusion detection techniques in wireless local area networks
Gill, R. S. (2009) · Faculty of Science and Technology; Information Security Institute · Cited by 4
WPA2 Based Wireless Enterprise Configuration
Hegde, S. B., Ranjan, A. K., Raj, A., et al. (2021) · IEEE International Conference on Mobile Networks and Wireless Communications (ICMNWC) · doi:10.1109/icmnwc52512.2021.9688387 · Cited by 3
Reyes-Moncayo, H. I., Malaver- Mendoza, L. D., & Ochoa-Murillo, A. L. (2020) · Scientia et technica · doi:10.22517/23447214.23781 · Cited by 3
A security-based asymmetric cryptographic algorithm to improve IEEE802.11i protocol
Shafiabadi, M. H., Souri, A., Ghasempour, A., et al. (2019) · International Journal of Information Technology · doi:10.1007/s41870-019-00319-5 · Cited by 3
Hamlet, J., & Keliiaa, C. (2010) · doi:10.2172/992337 · Cited by 3
A study of security in wireless and mobile payments
Ali, A. H. (2010) · KTH Publication Database DiVA (KTH Royal Institute of Technology) · Cited by 3
An anti-DoS attack architecture for wireless IT Infrastructure
K'Ondiwa, N. O., & Ochola, E. O. (2013) · doi:10.1109/scat.2013.7055096 · Cited by 2
“Our analysis shows that while RSN Association provides higher confidentiality, integrity and good authentication.”
BackgroundInfluentialSecurity Issues in Tactical Software-Defined Radios
da Silva, F. A. B., Moura, D., & Galdino, J. F. (2014) · Advances in systems analysis, software engineering, and high performance computing book series · doi:10.4018/978-1-4666-6034-2.ch002 · Cited by 2
Secret key generation based on private pilot under man-in-the-middle attack
Huang, Y., Jin, L., Li, N., et al. (2017) · Science China Information Sciences · doi:10.1007/s11432-017-9195-3 · Cited by 2
Mitigating Intrusion and Vulnerabilities in Cognitive Radio Networks
Ohaeri, I. U., Ekabua, O. O., Isong, B., et al. (2015) · Cited by 2
Challenges and Solutions for Eduroam Network Security
Batista, L. P. E. J., Gomes, H., & Almeida, J. R. (2025) · Procedia Computer Science · doi:10.1016/j.procs.2025.02.107 · Cited by 1
Classes of Attacks for Tactical Software Defined Radios
da Silva, F. A. B., Moura, D., & Galdino, J. F. (2012) · International Journal of Embedded and Real-Time Communication Systems · doi:10.4018/jertcs.2012100104 · Cited by 1
“In turn, in the flooding attack an adversary sends a large number of messages, related to a particular waveform, to a radio device at a rate so high that the SDR cannot process all the messages in time (Frankel et al., 2007).”
BackgroundThe practical risk assessment for enterprise Wireless Local Area Network
Liang, L., Yang, G., Du, J., et al. (2014) · International Conference on Information Science, Electronics and Electrical Engineering · doi:10.1109/infoseee.2014.6946261 · Cited by 1
“11i amendment[2], which specifies security components that work in conjunction with all the IEEE 802.”
BackgroundWireless Network Security: A review
Parmar, M. P. (2015) · International Journal of Modern Trends in Engineering and Research · Cited by 1
An Anomaly based Wireless Intrusion Detection System
Papini, D. (2008) · Cited by 1
Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations
Ross, R., & Pillitteri, V. Y. (2023) · doi:10.6028/nist.sp.800-171r3.fpd · Cited by 1
RetractedOn Resilience Challenges in Opportunistic Networks
Mehrparvar, M. (2012) · KTH Publication Database DiVA (KTH Royal Institute of Technology)
Six Keys to Improving Wireless Security
Graham, E., & Steinbart, P. J. (2009) · IGI Global eBooks · doi:10.4018/978-1-59904-855-0.ch034
An Approach for Prevention of MitM Attack Based on Rogue AP in Wireless Network
Wu, Z., Cai, M., & Liang, S. (2014) · DOAJ (DOAJ: Directory of Open Access Journals)
WIRELESS WI-FI SECURITY ANALYSIS IN AUTOMATED RAILWAY SYSTEMS
Zhukovytskyi, I. V., & Pedenko, I. A. (2020) · Science and Transport Progress · doi:10.15802/stp2020/213042
Six Keys to Improving Wireless Security
Graham, E., & Steinbart, P. J. (2013) · IGI Global eBooks · doi:10.4018/978-1-61350-323-2.ch602
Aspects of network security for VoIP solutions using IMS core network and Wi-Fi access
Gayde, R. S., Mathai, S. S., & Wang, K. (2007) · Bell Labs Technical Journal · doi:10.1002/bltj.20258
Six Keys to Improving Wireless Security
Graham, E., & Steinbart, P. J. (2013) · IGI Global eBooks · doi:10.4018/978-1-61350-323-2.ch6.2
Perez, A. (2014) · Network Security · doi:10.1002/9781119043942.biblio
Kaleem, F., & Yen, K. K. (2013) · IGI Global eBooks · doi:10.4018/978-1-61350-507-6.ch002
A method for detecting SIP-based man-in-the-middle attacks
Wang, X., Zhang, W., & Wu, Q. (2024) · International Conference on Electronics, Electrical and Information Engineering (ICEEIE) · doi:10.1117/12.3052195
“Additionally, Frankel et al., in their research 4 , characterize MITM attacks as primary cybersecurity threats.”
IEEE 802.11ba Frame Adaptations for Improving Power Efficiency in Semantic-Surveillance
Vaideeswaran, A. P., Pranav, K. S., & Khan, M. Z. A. (2025) · doi:10.1109/comsnets63942.2025.10885678
Authenticated Encryption on FPGAs from the Reconfigurable Part to the Static Part
Abdellatif, K. M. (2014) · theses.fr (ABES) · doi:10.70675/6ea09c8bz1140z4416z9afez41888dc17ac7 · Cited by 1
HYBRID DETECTION OF UNAUTHORIZED ACCESS POINTS IN WIRELESS NETWORKS
Prokopovych-Tkachenko, D., Khokhlachоva, Y., Магро, В. І., Черкаський, Д. О., & Переметчик, Д. О. (2026) · Cybersecurity Education Science Technique · doi:10.28925/2663-4023.2026.33.1245
Metadata
- Authors
- Frankel, S. E., Eydt, B., Owens, L., & Scarfone, K. A.
- Affiliations
- National Institute of Standards and Technology (US)
- ORCID
- Scarfone, K A
- Published
- 2007
- OpenAlex
- W2624248292
- Cited by
- 68
- References
- 0
- Citations by year
- 2026: 1 · 2025: 2 · 2024: 2 · 2023: 2 · 2022: 2 · 2021: 2 · 2020: 6 · 2019: 2 · 2018: 2 · 2017: 3 · 2016: 3 · 2015: 7 · 2014: 8 · 2013: 7 · 2012: 7
- Type
- report
- Language
- en
- Open access
- closed
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Wireless Networks and Protocols
- Physical Sciences › Computer Science › Computer Networks and Communications › Mobile Ad Hoc Networks
- Physical Sciences › Computer Science › Computer Networks and Communications › Security in Wireless Sensor Networks
- Keywords
- wireless network security, wireless networks, network security standards
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
