This chapter examines some of the issues related to wireless and mobile security and explores the solutions that are available to address any points of vulnerability.

In many ways wireless security is just like wireline security. The issues are largely the same. Regardless of the medium every system needs to safeguard proper authentication, privacy of transmission, prevention of viruses, and protection against denial-of-service attacks.

The differences occur from the fact that mobile devices and transmission over an unshielded medium (air) are inherently more vulnerable to impersonation, sabotage, and interception.

6.1.1 Problems with mobile passwords

Keeping passwords secret is a challenge in any environment. But the nature of mobile devices makes them even more susceptible than fixed terminals. The miniaturization of the computer, which implies small user interfaces and keypads, leads users to select even simpler passwords than they would in the wired world. Since multiple letters are associated with each numeric key on a keypad (differentiated through iterative key presses: e.g., press once for A, press twice for B), many users choose words that use the first (single press) letters, thereby substantially reducing the number of possible passwords.

Many phones have "intelligent" entry, such as iTAP or T9, which will perform dictionary comparisons to...