Microsoft, VeriSign Team on Wi-Fi Security Architecture

Citing the increased risk posed by mobile workers and wireless networking technology, Microsoft Corp. and VeriSign Inc. said on Wednesday that they are teaming up to help organizations secure Wi-Fi networks.

The two companies will collaborate to create a Wi-Fi security architecture based on Microsofts NAP (Network Access Protection) and VeriSigns Unified Authentication platforms.

The new architecture will help system administrators crack down on Wi-Fi-enabled computers that do not adhere to corporate security policies and facilitate use of multifactor authentication for accessing Wi-Fi networks, according to a statement.

"Evil Twin" and other wireless spoofing attacks provide a rich set of tools for identity thieves and corporate espionage agents. Click here to find out how to avoid them.

Microsofts NAP combines client/server technology with a new set of policy validation and enforcement APIs that allow administrators to quarantine client machines if they fail basic "health" tests, such as having up-to-date anti-virus definitions or operating system patches.

VeriSign Unified Authentication is a technology platform for deploying and provisioning multifactor authentication technology such as smart cards, secure USB (Universal Serial Bus) tokens and one-time passwords.

Resource Library:

VeriSign said it will work with Microsoft so that networks using VeriSign Unified Authentication can issue health certificates to Windows desktop clients so that they can access NAP-protected networks, the companies said.

VeriSign will also integrate its Unified Authentication platform with Microsofts Active Directory user directory technology and Internet Authentication Servers. Better integration will make management of user and device authentication credentials for Windows clients easier on Wi-Fi networks, the companies said.

Check out eWEEK.coms for the latest security news, reviews and analysis. And for insights on security coverage around the Web, take a look at eWEEK.com Security Center Editor Larry Seltzers Weblog.