Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
I have to write a term project about WPA/WPA2: I should find and read five articles and write a sort of summary of the technology citing those articles. And no, the professor will not help find articles.
It is a long shot, but if there is a reader who did academical reading on this, could he/she then please recommend me such articles.
Would be greatly appreciated.
I'd suggest the following:
Practical attacks against WEP and WPA (see also this Ars Technica summary)
Brute forcing Wi-Fi Protected Setup, and Dan Kaminsky's explanation and follow-up
Read Wikipedia's article and search on this site for WPA and WPA2. (Actually, that would have pointed you to many of these, and then standard literature search techniques find the rest.)
A few suggestions that might help you in your search...
The Security Now podcast with Steve Gibson did an episode on WPA earlier this year - Episode 335 (http://twit.tv/show/security-now/335). Episode 336 was a Q and A with some further questions answered and 337 was on a WPS vulnerability. While those aren't technically articles, they might point you in the right direction.
You can generally get a lot of good information from places like SANS, CERT, NIST and the like.
Stack Exchange posts should give you some ideas.
Your professor is doing a poor job. His philosophy is probably that he will throw you in the lake and if you can swim you will have learned a lot, and if not, well then ... he probably did not care.
Being totally new in a field, and not having research experience, it is impossible to know which papers to start with. So I totally understand your questions.
Some of the answers to this post, the arrogant and unfriendly ones, come because people just imagine that the professor knows what he is doing. These people have probably gone to good universities. Crappy universities sometimes have really crappy professors.
Asking you to read five papers is stupid. It took me one day to read a paper, and I considered myself an average computer science student. The result of your assignment will be that most students just pretend. They write something about the protocol, and then browse each article to find at least one (perhaps irrelevant) fact to weave into the report.
When I wrote my thesis most of the literature was suggested by my professor. Note: That was my thesis! Your professor is sending you out of the classroom without recommending any...
I can't suggest any articles. But the approaches below might work.
Asking someone who can give advice on which papers. I guess you didn't know any. Well, when I have a programming task that I can't solve I often use StackOverflow or other forums. So you could try and write in a forum. I would expect that in a security forum there would be people from the academic world, a PhD perhaps, that have worked with the field. They should be able to recommend a few articles. However, you must prepare for arrogant answers.
D.W. suggests reading the Wikipedia article and use those sources. That is a really good approach.
Another approach is to follow references in papers. This is not actually something I've practiced, but I imagine it would work. Browse (don't read) some random papers on the topic, and look at their references. There will probably be some papers that a lot of papers refer to. That probably means they are helpful sources, or just sources that form the basis. Pick one of those. Read it through, and make sure you understand it. Of course this article will be one of the five. In this article, when you've read it carefully, you will see references to other articles, and you will have some understanding of what these articles cover. Pick four more among these.
