The aim of this thesis was to create a web application used for centralized management and configuration of wireless networks on access points running on OpenWrt distribution. The reader is acquainted with common principles of wireless networks including description of existing solutions for their centralized management. After that the thesis introduces the reader to OpenWrt distribution and to a method of its configuration using UCI model. The reader is then introduced to the main technologies used in this thesis. Author further describes architecture, user interface and implementation of the web application. The created web application is platform agnostic and provides easy way to manage and configure access points with OpenWrt distribution.

This master´s thesis is about 802.11 standard security techniques and their features. Particular types of this standard and its features are shown in the introduction. Wireless network security cypher alghoritm types, their features, weaknesses and principles of functions are closely described in next few chapters. Realized attacks on these security alghoritms with their principles are described and shown in the practical part of thesis. One chapter is about effectivity, accessibility and practicability valorization of these attacks in practice.

The main topic of my diploma thesis is dedicated to the issue of wireless networks mostly aimed at IEEE 802.11 standard. Theoretical part of the thesis is divided into three main chapters. It deals with basic overview of standards, architecture, utilization of radio spectrum and modulating techniques in signal processing. Further, it describes basic security measures and quality of service requirements in WLAN networks. The thesis is complemented by two separate laboratory assignments focused on procedure related to the chosen problematic. The first assignment handles common steps to break ciphered protocols WEP and WPA in WLAN’s. Linux software called Back Track 5 was used to provide complete package of tools for WLAN security tests. The second one is aimed at practical options on video streaming in converged wireless networks and also at remote access of mobile users to wireless IP camera video stream.

In this paper, we introduce and evaluate ScaleMesh, a scalable miniaturized dual-radio wireless mesh testbed based on IEEE 802.11b/g technology. ScaleMesh can emulate large-scale mesh networks within a miniaturized experimentation area by adaptively shrinking the transmission range of mesh nodes by means of variable signal attenuators. To this end, we derive a theoretical formula for approximating the attenuation level required for downscaling desired network topologies. We present a performance study in which we validate the feasibility of ScaleMesh for network emulation and protocol evaluation. We further conduct singleradio vs. dual-radio experiments in ScaleMesh, and show that dual-radio communication significantly improves network goodput. The median TCP goodput we observe in a typical random topology at 54 Mbit/s and dual-radio communication ranges between 1468 Kbit/s and 7448 Kbit/s, depending on the current network load.

In this paper, we introduce a novel congestion control algorithm for TCP over multihop IEEE 802.11 wireless networks implementing rate-based scheduling of transmissions within the TCP congestion window. We show how a TCP sender can adapt its transmission rate close to the optimum using an estimate of the current 4-hop propagation delay and the coefficient of variation of recently measured round-trip times. The novel TCP variant is denoted as TCP with Adaptive Pacing (TCP-AP). Opposed to previous proposals for improving TCP over multihop IEEE 802.11 networks, TCP-AP retains the end-to-end semantics of TCP and does neither rely on modifications on the routing or the link layer nor requires cross-layer information from intermediate nodes along the path. A comprehensive simulation study using ns-2 shows that TCP-AP achieves up to 84% more goodput than TCP NewReno, provides excellent fairness in almost all scenarios, and is highly responsive to changing traffic conditions.

The “WLAN in Disaster Emergency Response” (WIDER) project has developed and implemented an emergency communication system. It provides network and communication services to relief organizations. In order to guarantee the stable and efficient connectivity with a high quality of service (QoS) for the end user, and to make the WIDER system more adaptive to the disaster area, the IEEE 802.16 specification based broadband wireless access solution is adopted. This thesis work aims at evaluating and testing the WIDER system integrated with WiMAX. By learning and analyzing the technology, the benefits and perspective for WIDER using WiMAX are described. A WiMAX solution was configured and integrated into the WIDER system. A series of tests and measurements provide us the performance of the WiMAX solution in throughput, QoS, and reality. The tests helped us to learn and verify the improvements for WIDER due to WiMAX. / “WLAN in Disaster Emergency Response” (WIDER) projektet har utvecklat och implementerat ett kommunikationssystem för katastrof situationer. Systemet tillhandahåller nätverk- och kommunikationstjänster för hjälporganisationer. För att garantera en stabil och effektiv anslutning med hög Quality of Service för användarna samt göra WIDER systemet mer anpassbart för katastrofområden, kommer Broadband wireless access som är baserade på IEEE 802.16 specifikationen att användas. Det här examensarbetet har som målsättning att utvärdera och testa WIDER med WiMax tekniken, vi beskriver olika fördelar och synvinklar med att använda WiMax genom att lära oss och analysera tekniken. En WiMax lösning konfigurerades och integrerades i WIDER systemet. En rad tester och mätningar visar WiMax-lösningens prestanda i form av throughput, Quality of Service och realitet. Testerna lärde oss och hjälpte oss att verifiera förbättringarna i WIDER i och med användningen av WiMax.

京都大学 / 0048 / 新制・課程博士 / 博士(情報学) / 甲第19128号 / 情博第574号 / 新制||情||101(附属図書館) / 32079 / 京都大学大学院情報学研究科通信情報システム専攻 / (主査)教授 守倉 正博, 教授 高橋 達郎, 教授 梅野 健 / 学位規則第4条第1項該当 / Doctor of Informatics / Kyoto University / DFAM

IEEE 802.11 wireless networking equipment has made it possible to bridge the last mile for new broadband internet service providers. Inexpensive wireless networking equipment and high gain antennas enable high speed internet delivery at a fraction of the cost of installing or upgrading land lines for cable or DSL services. Based on this research, a guide of general practices and procedures is proposed for designing, installing, and maintaining a reliable wireless community area network. Included tests have provided performance results for several types of wireless antennas (including wire grid parabolic dishes, Yagi and Vagi styles, and echo backfire), wireless bridges, and other factors which influence overall signal strength and throughput. Two separate configurations are recommended. The first configuration is based on high reliability, longer distances, and low error rates. The second recommendation is based on lower overall cost, ease of installation, and shorter link distances.

The 802.11 standard defines the Wired Equivalent Privacy (WEP) and encapsulation of data frames. It is intended to provide data privacy to the level of a wired network. WEP suffered threat of attacks from hackers owing to certain security shortcomings in the WEP protocol. Lately, many new protocols like WiFi Protected Access (WPA), WPA2, Robust Secure Network (RSN) and 802.11i have come into being, yet their implementation is fairly limited. Despite its shortcomings one cannot undermine the importance of WEP as it still remains the most widely used system and we chose to address certain security issues and propose some modifications to make it more secure. In this thesis we have proposed a modification to the existing WEP protocol to make it more secure. We achieve Message Privacy by ensuring that the encryption is not breached. The idea is to update the shared secret key frequently based on factors like network traffic and number of transmitted frames. We also develop an Initialization Vector (IV) avoidance algorithm that eliminates IV collision problem. The idea is to partition the IV bits among different wireless hosts in a predetermined manner unique to every node. We can use all possible 224 different IVs without making them predictable for an attacker. Our proposed algorithm eliminates the IV collision ensuring Message Privacy that further strengthens security of the existing WEP. We show that frequent rekeying thwarts all kinds of cryptanalytic attacks on the WEP.

京都大学 / 新制・課程博士 / 博士(情報学) / 甲第23327号 / 情博第763号 / 新制||情||130(附属図書館) / 京都大学大学院情報学研究科通信情報システム専攻 / (主査)教授 守倉 正博, 教授 原田 博司, 教授 大木 英司 / 学位規則第4条第1項該当 / Doctor of Informatics / Kyoto University / DFAM