Securing IEEE 802.11 wireless LANs

As the acceptance and popularity of wireless networking technologies has proliferated, the security of the IEEE 802.11 wireless local area network (WLAN) has advanced in leaps and bounds. From tenuous beginnings, where the only safe way to deploy a WLAN was to assume it was hostile and employ higherlayer information security controls, to the current state of the art, all manner of improvements have been conceived and many implemented. This work investigates some of the remaining issues surrounding IEEE 802.11 WLAN operation. While the inherent issues in WLAN deployments and the problems of the original Wired Equivalent Privacy (WEP) provisions are well known and widely documented, there still exist a number of unresolved security issues. These include the security of management and control frames and the data link layer protocols themselves. This research introduces a novel proposal to enhance security at the link layer of IEEE 802.11 WLANs and then conducts detailed theoretical and empirical investigation and analysis of the eects of such proposals. This thesis �rst de�nes the state of the art in WLAN technology and deployment, including an overview of the current and emerging standards, the various threats, numerous vulnerabilities and current exploits. The IEEE 802.11i MAC security enhancements are discussed in detail, along with the likely outcomes of the IEEE 802.11 Task Group W1, looking into protected management frames. The problems of the remaining unprotected management frames, the unprotected control frames and the unprotected link layer headers are reviewed and a solution is hypothesised, to encrypt the entire MAC Protocol Data Unit (MPDU), including the MAC headers, not just the MAC Service Data Unit (MSDU) commonly performed by existing protocols. The proposal is not just to encrypt a copy of the headers while still using cleartext addresses to deliver the frame, as used by some existing protocols to support the integrity and authenticity of the headers, but to pass the entire MPDU only as ciphertext to also support the con�dentiality of the frame header information. This necessitates the decryption of every received frame using every available key before a station can determine if it is the intended recipient. As such, this raises serious concerns as to the viability of any such proposal due to the likely impact on throughput and scalability. The bulk of the research investigates the impacts of such proposals on the current WLAN protocols. Some possible variations to the proposal are also provided to enhance both utility and speed. The viability this proposal with respect to the eect on network throughput is then tested using a well known and respected network simulation tool, along with a number of analysis tools developed speci�cally for the data generated here. The simulator's operation is �rst validated against recognised test outputs, before a comprehensive set of control data is established, and then the proposal is tested and and compared against the controls. This detailed analysis of the various simulations should be of bene�t to other researchers who need to validate simulation results. The analysis of these tests indicate areas of immediate improvement and so the protocols are adjusted and a further series of experiments conducted. These �nal results are again analysed in detail and �nal appraisals provided.

Markov modelling of the IEEE 802.11 DCF for real-time applications with periodic traffic

Popular wireless network standards, such as IEEE 802.11/15/16, are increasingly adopted in real-time control systems. However, they are not designed for real-time applications. Therefore, the performance of such wireless networks needs to be carefully evaluated before the systems are implemented and deployed. While efforts have been made to model general wireless networks with completely random traffic generation, there is a lack of theoretical investigations into the modelling of wireless networks with periodic real-time traffic. Considering the widely used IEEE 802.11 standard, with the focus on its distributed coordination function (DCF), for soft-real-time control applications, this paper develops an analytical Markov model to quantitatively evaluate the network quality-of-service (QoS) performance in periodic real-time traffic environments. Performance indices to be evaluated include throughput capacity, transmission delay and packet loss ratio, which are crucial for real-time QoS guarantee in real-time control applications. They are derived under the critical real-time traffic condition, which is formally defined in this paper to characterize the marginal satisfaction of real-time performance constraints.

Performance analysis of IEEE 802.11 DCF based WNCS networks

Wireless network technologies, such as IEEE 802.11 based wireless local area networks (WLANs), have been adopted in wireless networked control systems (WNCS) for real-time applications. Distributed real-time control requires satisfaction of (soft) real-time performance from the underlying networks for delivery of real-time traffic. However, IEEE 802.11 networks are not designed for WNCS applications. They neither inherently provide quality-of-service (QoS) support, nor explicitly consider the characteristics of the real-time traffic on networked control systems (NCS), i.e., periodic round-trip traffic. Therefore, the adoption of 802.11 networks in real-time WNCSs causes challenging problems for network design and performance analysis. Theoretical methodologies are yet to be developed for computing the best achievable WNCS network performance under the constraints of real-time control requirements. Focusing on IEEE 802.11 distributed coordination function (DCF) based WNCSs, this paper analyses several important NCS network performance indices, such as throughput capacity, round trip time and packet loss ratio under the periodic round trip traffic pattern, a unique feature of typical NCSs. Considering periodic round trip traffic, an analytical model based on Markov chain theory is developed for deriving these performance indices under a critical real-time traffic condition, at which the real-time performance constraints are marginally satisfied. Case studies are also carried out to validate the theoretical development.

Self-defence against terrorism in the post 9/11 world

In 1986 the then United States Secretary of State George Shultz asserted that: It is absurd to argue that international law prohibits us from capturing terrorists in international waters or airspace; from attacking them on the soil of other nations, even for the purpose of rescuing hostages; or from using force against states that support, train and harbor terrorists or guerrillas. At that time the United States’ claim of a right to use military force in self-defence against terrorism2 received little support from other states.3 The predominant view then was that terrorist attacks committed by private or non-state actors were a form of criminal activity to be combated through domestic and international criminal justice mechanisms. The notion that such terrorist acts should be treated as ‘armed attacks’ triggering a victim state’s right of self-defence was not accepted by the majority of states. To suggest, as Shultz had done, that a state not directly responsible for terrorist acts could have its territorial integrity violated by military action targeting terrorists located within that state, was a controversial proposition in 1986. However, some fifteen years later, when the United States and a coalition of allies launched a military campaign in Afghanistan following the 11 September 2001 (hereafter ‘9/11’) terrorist attacks, there was virtually unanimous international support for the use of force.

State convergence in the initialisation of stream ciphers

An initialisation process is a key component in modern stream cipher design. A well-designed initialisation process should ensure that each key-IV pair generates a different key stream. In this paper, we analyse two ciphers, A5/1 and Mixer, for which this does not happen due to state convergence. We show how the state convergence problem occurs and estimate the effective key-space in each case.

From Greek temple to bird's nest : mapping, assessing and understanding national integrity systems

In this paper, I would like to outline the approach we have taken to mapping and assessing integrity systems and how this has led us to see integrity systems in a new light. Indeed, it has led us to a new visual metaphor for integrity systems – a bird’s nest rather than a Greek temple. This was the result of a pair of major research projects completed in partnership with Transparency International (TI). One worked on refining and extending the measurement of corruption. This, the second, looked at what was then the emerging institutional means for reducing corruption – ‘national integrity systems’

Association between polymorphisms in the progesterone receptor gene and endometriosis

The progesterone receptor (PR) is a candidate gene for the development of endometriosis, a complex disease with strong hormonal features, common in women of reproductive age. We typed the 306 base pair Alu insertion (AluIns) polymorphism in intron G of PR in 101 individuals, estimated linkage disequilibrium (LD) between five single-nucleotide polymorphisms (SNPs) across the PR locus in 980 Australian triads (endometriosis case and two parents) and used transmission disequilibrium testing (TDT) for association with endometriosis. The five SNPs showed strong pairwise LD, and the AluIns was highly correlated with proximal SNPs rs1042839 (Δ2 = 0.877, D9 = 1.00, P < 0.0001) and rs500760 (Δ2 = 0.438, D9 = 0.942, P < 0.0001). TDT showed weak evidence of allelic association between endometriosis and rs500760 (P = 0.027) but not in the expected direction. We identified a common susceptibility haplotype GGGCA across the five SNPs (P = 0.0167) in the whole sample, but likelihood ratio testing of haplotype transmission and non-transmission of the AluIns and flanking SNPs showed no significant pattern. Further, analysis of our results pooled with those from two previous studies suggested that neither the T2 allele of the AluIns nor the T1/T2 genotype was associated with endometriosis.

CDKN2A/p16 is inactivated in most melanoma cell lines

The CDKN2A gene maps to chromosome 9p21-22 and is responsible for melanoma susceptibility in some families. Its product, p16, binds specifically to CDK4 and CDK6 in vitro and in vivo, inhibiting their kinase activity. CDKN2A is homozygously deleted or mutated in a large proportion of tumor cell lines and some primary tumors, including melanomas. The aim of this study was to investigate the involvement of CDKN2A and elucidate the mechanisms of p16 inactivation in a panel of 60 cell lines derived from sporadic melanomas. Twenty-six (43%) of the melanoma lines were homozygously deleted for CDKN2A, and an additional 15 (25%) lines carried missense, nonsense, or frameshift mutations. All but one of the latter group were shown by microsatellite analysis to be hemizygous for the region of 9p surrounding CDKN2A. p16 was detected by Western blotting in only five of the cell lines carrying mutations. Immunoprecipitation of p16 in these lines, followed by Western blotting to detect the coprecipitation of CDK4 and CDK6, revealed that p16 was functionally compromised in all cell lines but the one that carried a heterozygous CDKN2A mutation. In the remaining 19 lines that carried wild-type CDKN2A alleles, Western blot analysis and immunoprecipitation indicated that 11 cell lines expressed a wild-type protein. Northern blotting was performed on the remaining eight cell lines and revealed that one cell line carried an aberrantly sized RNA transcript, and two other cell lines failed to express RNA. The promoter was found to be methylated in five cell lines that expressed CDKN2A transcript but not p16. Presumably, the message seen by Northern blotting in these cell lines is the result of cross-hybridization of the total cDNA probe with the exon 1beta transcript. Microsatellite analysis revealed that the majority of these cell lines were hemi/homozygous for the region surrounding CDKN2A, indicating that the wild-type allele had been lost. In the 11 cell lines that expressed functional p16, microsatellite analysis revealed loss of heterozygosity at the markers immediately surrounding CDKN2A in five cases, and the previously characterized R24C mutation of CDK4 was identified in one of the remaining 6 lines. These data indicate that 55 of 60 (92%) melanoma cell lines demonstrated some aberration of CDKN2A or CDK4, thus suggesting that this pathway is a primary genetic target in melanoma development.

CDKN2A is not the principal target of deletions on the short arm of chromosome 9 in neuroendocrine (Merkel cell) carcinoma of the skin

The majority of small-cell lung cancers (SCLCs) express p16 but not pRb. Given our previous study showing loss of pRb in Merkel cell carcinoma (MCC)/neuroendocrine carcinoma of the skin and the clinicopathological similarities between SCLC and MCC, we wished to determine if this was also the case in MCC. Twenty-nine MCC specimens from 23 patients were examined for deletions at 10 loci on 9p and 1 on 9q. No loss of heterozygosity (LOH) was seen in 9 patients including 2 for which tumour and cell line DNAs were examined. Four patients had LOH for all informative loci on 9p. Ten tumours showed more limited regions of loss on 9p, and from these 2 common regions of deletion were determined. Half of all informative cases had LOH at D9S168, the most telomeric marker examined, and 3 specimens showed loss of only D9S168. A second region (IFNA-D9S126) showed LOH in 10 (44%) cases, and case MCC26 showed LOH for only D9S126, implicating genes centromeric of the CDKN2A locus. No mutations in the coding regions of p16 were seen in 7 cell lines tested, and reactivity to anti-p16 antibody was seen in all 11 tumour specimens examined and in 6 of 7 cell lines from 6 patients. Furthermore, all cell lines examined reacted with anti-p14(ARF) antibody. These results suggest that neither transcript of the CDKN2A locus is the target of deletions on 9p in MCC and imply the existence of tumour-suppressor genes mapping both centromeric and telomeric of this locus.

Evidence for three tumor suppressor loci on chromosome 9p involved in melanoma development

Cytogenetic and loss of heterozygosity (LOH) studies have long indicated the presence of a tumor suppressor gene (TSG) on 9p involved in the development of melanoma. Although LOH at 9p has been reported in approximately 60% of melanoma tumors, only 5-10% of these tumors have been shown to carry CDKN2A mutations, raising the possibility that another TSG involved in melanoma maps to chromosome 9p. To investigate this possibility, a panel of 37 melanomas derived from 35 individuals was analyzed for CDKN2A mutations by single-strand conformation polymorphism analysis and sequencing. The melanoma samples were then typed for 15 markers that map to 9p13-24 to investigate LOH trends in this region. In those tumors demonstrating retention of heterozygosity at markers flanking CDKN2A and LOH on one or both sides of the gene, multiplex microsatellite PCR was performed to rule out homozygous deletion of the region encompassing CDKN2A. CDKN2A mutations were found in tumors from 5 patients [5 (14%) of 35], 4 of which demonstrated LOH across the entire region examined. The remaining tumor with no observed LOH carried two point mutations, one on each allele. Although LOH was identified at one or more markers in 22 (59%) of 37 melanoma tumors corresponding to 20 (57%) of 35 individuals, only 11 tumors from 9 individuals [9 (26%) of 35] demonstrated LOH at D9S942 and D9S1748 the markers closest to CDKN2A. Of the remaining 11 tumors with LOH 9 demonstrated LOH at two or more contiguous markers either centromeric and/or telomeric to CDKN2A while retaining heterozygosity at several markers adjacent to CDKN2A. Multiplex PCR revealed one tumor carried a homozygous deletion extending from D9S1748 to the IFN-alpha locus. In the remaining eight tumors, multiplex PCR demonstrated that the observed heterozygosity was not attributable to homozygous deletion and stromal contamination at D9S1748, D9S942, or D9S974, as measured by comparative amplification strengths, which indicates that retention of heterozygosity with flanking LOH does not always indicate a homozygous deletion. This report supports the conclusions of previous studies that a least two TSGs involved in melanoma development in addition to CDKN2A may reside on chromosome 9p.

Modelling and performance evaluation of the IEEE 802.11 DCF for real-time control

Popular wireless networks, such as IEEE 802.11/15/16, are not designed for real-time applications. Thus, supporting real-time quality of service (QoS) in wireless real-time control is challenging. This paper adopts the widely used IEEE 802.11, with the focus on its distributed coordination function (DCF), for soft-real-time control systems. The concept of the critical real-time traffic condition is introduced to characterize the marginal satisfaction of real-time requirements. Then, mathematical models are developed to describe the dynamics of DCF based real-time control networks with periodic traffic, a unique feature of control systems. Performance indices such as throughput and packet delay are evaluated using the developed models, particularly under the critical real-time traffic condition. Finally, the proposed modelling is applied to traffic rate control for cross-layer networked control system design.

Implementation of ICD-11... perspectives from the Australian Bureau of Statistics

As the development of ICD-11 progresses, the Australian Bureau of Statistics is beginning to consider what will be required to successfully implement the new version of the classification. This paper will present early thoughts on the following: building understanding amongst the user community of upcoming changes and the implications of those changes; the need for training of coders and data users; development of analytical methods and conduct of comparability studies; processes to test, accept and implement new or updated coding software; assessment of coding quality; changes to data analyses and reporting processes; updates to regular publications; and assessing the resources required for successful implementation.