A Threat Analysis of The Extensible Authentication Protocol

Acknowledgement I wish to express my sincere gratitude to Professor Michel Barbeau, my supervisor, for his encouragement and guidance during the course of this project. Thank you for always being there and helping me whenever I needed. ii Abstract Security is always a major concern for wireless LAN development. This type of development is suffering today from different security problems due to the fact that it is a wireless technology. Extensible Authentication Protocol (EAP) is widely used in WiFi/802.11 and WiMax/802.16 wireless networks as an authentication solution. This report uncovers the main threats to EAP and some common EAP methods. Specifically EAP-MD5, EAP-LEAP, EAP-TLS, EAP-TTLS and EAP-PEAP are reviewed in detail. A threat analysis is presented and the threat is ranked from three aspects: likelihood, impact, and risk.