Wireless Security.pdf - PDF Archive

Security in Traditional Wireless Networks 385
Client
Server
Client hello
Server hello
Server certificate*
Server key exchange*
Certificate request*
Server hello done
Client certificate*
Client key exchange*
Certificate verify*
[Change cipher spec]
Finished
[Change cipher spec]
Finished
Application data
Figure 17.9 : TLS in WAP
17.3.2 Code Security
For most part, network security is concerned with transactional security on the network.
In other words, we talk about securing the link(s) in the network using encryption,
securing access to the network using authentication and so on. The merging of the
GSM network with the Internet, however, adds another dimension to the concept of
network security. The ME in a GPRS network can “ browse ” the Internet. In the Internet
architecture, web servers sometimes download applets (short programs) on to the client
(ME) over the network. These applets then execute at the client (ME). Consider what
happens if the applet is a malicious piece of code or it simply has a bug which can harm
the ME. To protect against such attacks, it is extremely important that the applets (or
other programs which are downloaded from remote sites but execute on the client) be
secure.
www.newnespress.com