Conclusions We have demonstrated attacks on the Wired Equivalent Privacy protocol which defeat each of the security goals of: Confidentiality We can read WEP-protected traffic Access Control We can inject traffic on WEP-protected networks Data Integrity We can modify WEP-protected traffic in transit This isn't a death knell for wireless ethernet! Just don't assume it's secure; use another security mechanism on top of it. e.g. VPN, IPSec, ssh Open standards are more likely to be secure!