Our wireless expert will explore the different challenges security professionals faced in securing network airspaces and combating the most common wireless network security threats such as password theft and malware, followed by best practice advice on how best to identify and monitor rogue deives and access points through automation.

1. Outpost24 Template
2019
Wireless Security:
Preventing wireless attacks with device visability and effective controls.
John Stock
29th April 2020

2. Helping customers improve security posture since 2001
Full stack security assessment
Over 2,000 customers in all regions of the world
Really good at breaking technology
Acquired Pwnie Express in 2019

3. Outpost24 Template
2019
Today’s key topics
3
• Benchmarks from RSA 2020 of Wireless Security
trends
• Combatting wireless threats from BYOD and
Shadow IT
• Why asset and device visibility is critical to
wireless security
• Implementing wireless detection into your
security workflow
• Subtle changes to help boost your detection of
unauthorized access
• Takeaways

4. Outpost24 Template
2019
Today’s topic
4
Why risk is the new normal
Adapting to the threat landscape
Bringing in the business context
Business aligned remediation
Takeaways
View from a:
• Business perspective
• With a little added tech

5. 5
Why are wireless
technologies
increasing our risk?

6. Traditional wired networks had a simple security model
• One Way in, One way out
• Everything inside is ‘trusted’

7. Traditional wired networks had a simple security model
• One Way in, One way out
• Everything inside is ‘trusted’
…but wireless networks, quite literally, turn your network inside-out…

8. • Monitoring and enforcing network access policies

9. Modern tech doesn’t fix the age-old problem
9
Ref: https://hexway.io/blog/apple-bleee/

10. Despite our efforts, wireless is EVERYWHERE
10

11. 11
WIRELESS SECURITY:
THE INTERNET OF EVIL
THINGS 2020
A poll of over 200 security professionals during the 2020 RSA
Conference.

12. 12
Key Focus Points:
• Confidence in what they have
• Confidence in what's around them
• Ability to recognize threats
• Ability to react to threats
WIRELESSSECURITY:
THE INTERNET OF EVILTHINGS 2020

13. 13
How confident are you at preventing a wireless attack?

14. 14
What is the biggest threat to your organization's wireless
security?

15. 15
Which wireless threats present the greatest risk?

16. 16
When was the last time you checked wireless devices for
known vulnerabilities?

17. 17
Do you know how many devices are connected to your
network?

18. 18
Does your organization need to do more to monitor and
protect against rogue devices or Access Points?

19. 19
Do device purchases have to be cleared by security
personnel?

20. 20
Do you have a dedicated guest Wi-Fi network?

21. Outpost24 Template
2019Asset and device visibility is critical to
wireless security
21

22. 22
Why is asset and device visibility important?

23. 23Modern Enterprise challenges
• Increased access
• Increased attack surface
• Gaps in visibility

24. You can only secure what you can see
24

25. You can only secure what you can see
25

26. You can only secure what you can see
26

27. Outpost24 Template
2019Common wireless security threats
27

28. 28
Common wireless security threats

29. Wireless Keyloggers
29
• Cheap to acquire
• Easy to acquire
• Discreet
• Limited range
• Physical access required

30. Unauthorized Access points
30
Unauthorised Access Point: Default Configuration
• Weak encryption puts data at risk.
• Default credentials offers foothold onto network
Authorized Device
Unauthorized Device

31. Evil Twin Access Points
31
Weak Wireless signal
Strong Wireless signal
Safe Corporate WirelessUnsafe Access Point
SSID: Acme_WirelessSSID: Acme_Wireless
Rogue access point
broadcasts the same
SSID as the corporate
access point

32. Outpost24 Template
2019Building monitoring into your workflow
32

33. 33Who is responsible for monitoring your airspace?
• The network team?
• The security team?
• No-one?

34. 3434
Understanding the airspace
Classify and Normalize
Take Discovered data and transform
into more meaningful data
Report
View historical data which has previously been
gathered about a specific device
Continuous monitoring
Always looking at the wireless airspace
to identify any threats as and when
they are seen
Correlate
Correlate with previously discovered
data to identify anomalies and risks
Alert
If alert required due to
configuration of alerts.
Discover
Start with Raw data

35. Matching the generalized assessment process
35

36. React in the right way
36

37. Outpost24 Template
2019Takeaways?
37

38. • Wireless network confidence is still a
little behind for security professionals
• Same threats, different attack surface
• You can only protect yourself from
what you know about
• Building into your existing workflow is
simple
Takeaways

39. Outpost24 Template
2019
John Stock
Product Manager – Wireless and Network Security
js@outpost24.com
Questions?