Using the Fluhrer, Mantin, and Shamir Attack to Break WEP

By Adam Stubblefield, John Ioannidis, Aviel D. Rubin. Network and Distributed System Security Symposium, 2002

446 citations recorded by the source corpus.

View Paper: https://www.semanticscholar.org/paper/8300143516461df371bff2f12fdbbeedc1091ccf

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Citations in the corpus

A secure routing protocol for ad hoc networks (2002, background): “Our focus is on vulnerabilities and exposures that result from the speci(cid:2)cation of the ad hoc routing protocol, and not from problems with IEEE 802.11 [2, 4, 18].”
Enhancing Location Privacy in Wireless LAN Through Disposable Interface Identifiers: A Quantitative Analysis (2003, background): “Categories and Subject Descriptors D.4 [Operating Systems]: Security & Protection General Terms Measurement,Design,Security Keywords Location Privacy,Wireless LAN,Interface Identi.ers 1.”
Talking to Strangers: Authentication in Ad-Hoc Wireless Networks (2002, background): “, an unauthenticatedkey exchange over the wirelesslink), as the latter may be subjectto active (or even passi ve, see[19]) attackson the wirelesslink, which are considerably easierto mount.”
(Not So) Random Shuffles of RC4 (2002, background): “In the case of RC4 it has turned out to be disastrous: the second part of the [FMS01] paper cryptanalyzed the Wired Equivalent Privacy protocol (WEP) that did just that; the attack was implemented and shown to be feasible by [ SIR02 ].”
Weaknesses in the Key Scheduling Algorithm of RC4 (2001, background): “Shortly after the publication of a preliminary version of this paper, Stubblefield, Ioannidis and Rubin ([SIR01]) implemented the attack and successfully derived a 128 bit WEP key, by observing the network during a single evening.”
Security in mobile ad hoc networks: challenges and solutions (2004, unknown): “• Probabilistic cipher key recovery attacks such as the Fluhrer-Mantin-Shamir attack [22].”
The TESLA Broadcast Authentication Protocol (2002, background): “Shortly after the publication of a preliminary version of [FMS01], Stubblefield, Ioannidis and Rubin ([ SIR01 ]) implemented the attack and successfully derived a 128 bit WEP key by passively observing a real network during a single evening.”
Key Reinstallation Attacks: Forcing Nonce Reuse in WPA2 (2017, background): “After researchers showed thatWired Equivalent Privacy (WEP) was fundamentally broken [30, 65], the IEEE offered a more robust solution in the 802.”