WISDOM for WLAN Practitioners
We have identified the 802.11 WLAN as the most vulnerable and
critical node in wireless converged network security. WLANs can easily be
reconfig-ured, are very mobile, allow for potentially continuous exposure, and
require the level of security (a.k.a., a security profile) to be scrutinized
even more than is required for wired networks. This includes inherent security
flaws known to exist in 802.11 architecture that result in additional risks to
otherwise secure converged wired networks. An even worse scenario to consider is
one where an insecure WLAN is connected to a weakly secured or insecure wired
network and the wireless subnet is not separated from the wired subnet. There is
a significant need for a comprehensive network security methodology that
integrates wired and wireless technologies and addresses their characteristics
and security requirements.
This chapter presents a model developed by James Ransome
during his doctoral research that is known as the Wireless Integrated Secure
Data Options Model (WISDOM). WISDOM provides three tiered security options, with
proper hardware, software, and security requirements delineated to secure a WLAN
at a corresponding security level equivalent to the wired network with which it
connects. We have combined additional work-sheets to supplement WISDOM and have
presented them in this chapter as a baseline for your future use in WLAN
security architecture design.