Wireless and Emerging Attack Risks and Recommendations
•
1 j'aime•1,379 vues
Motorola Wireless Security Concerns. Visit http://www.systemid.com/symbol/ for barcode equipments
![AGENDA ,[object Object],[object Object],[object Object]](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)
Recommandé
Contenu connexe
Tendances
Tendances (20)
En vedette
En vedette (20)
Similaire à Wireless and Emerging Attack Risks and Recommendations
Similaire à Wireless and Emerging Attack Risks and Recommendations (20)
Dernier
Dernier (20)
Wireless and Emerging Attack Risks and Recommendations
- 1. THE THREAT OF WIRELESS AND EMERGING ATTACKS FEB 23, 2011 AIRDEFENSE SOLUTIONS, MOTOROLA SOLUTIONS
- 3. WIRELESS SECURITY CONCERNS INTERNET Server Muni Wi-Fi or Neighbors Network Edge Blurred New Attack Vectors ‘Behind’ the Firewall 1 Rogue AP Connected to Network (Network Breach) Hacker 3 Leaked Wired Traffic & Insertion (Data Leakage) Hotspot Evil Twin Mobile User 2 Hotspot Phishing (Data Leakage) 5 Users Bypassing Network Security Controls (Data Leakage/Network Backdoor) 4 Non-Compliant AP (Network Breach/Data Leakage/ Data Compromise)
- 4. MOBILE WORKERS VULNERABILITIES Do I have wired & wireless on at the same time? Is my laptop probing for SSIDs not on the safe list? Are my employees using Municipal Wi-Fi? Am I connected to an insecure access point? Am I connected to a real hotspot connection? Am I connected to someone nearby in ad-hoc mode?
- 14. MOTOROLA AIRDEFENSE SOLUTION Ensure Security and Comply with Regulatory & Industry Requirements Centrally Control and Monitor WLAN Infrastructure with One Management Console Infrastructure Management Network Assurance Managed Services Advanced Services Solutions for Any WLAN Allows Remote Troubleshooting and Proactive Analysis of Wireless Issues Security & Compliance
- 15. THANK YOU…
Notes de l'éditeur
- Wireless changes that paradigm. Radio waves cannot be stopped by walls and doors. As soon as you connect a wireless Access Point to the intranet, any traffic sent wirelessly is now visible in the enterprise’s parking lot. This introduces several new vulnerabilities that did not exist in the wired world. The most common problem is rogue wireless access. An employee or contractor might bring in an unauthorized AP and connect it to the intranet without enabling security. This rogue AP can then provide unrestricted access to hackers in the vicinity sniffing for open or poorly secured wireless APs. Similarly, authorized wireless APs may have weak security like WEP that can allow similar “behind the firewall” access to the sensitive enterprise internal network. Once on the “soft” internal network, hackers can mount several different attacks given the fact that intranets were designed to block attacks at the edge. Wireless also aggravates the “insider threat”. Users can connect their laptops to external wireless networks and bypass internet filters and enterprise proxy’s while being in the enterprise perimeter. Sometimes, laptops can simultaneous be connected to the wired and an unauthorized external wireless network. Many enterprises that have deployed wireless also have to deal with the support costs of managing and troubleshooting wireless connectivity and performance issues that are very different from wired access problems.
- New School Method - Direct attacks on Wireless Clients using Cellphone Attack vector on any wifi enabled cell phone… Got a WiFi iPad, iPod, Mac?
- Captive portal doesn’t allow “access” until authenticated via the portal It does allow access to the wireless network, and provides an IP… What can I do with access to the local network? Unless PSPF is enabled, hacker can scan and target other users of the wireless network Exploit their laptop and steal credentials for other wireless networks (metasploit anyone?) Validate if portal ACL rules are properly prohibiting access Virtually every captive portal we tested was only controlling HTTP/HTTPS access to the Internet and internal networks We could ping, ssh, telnet, ftp, etc. without EVER authenticating to the portal!!!
- Section Slide Example TITLE ALL CAPS ARIAL 44 PT BOLD, line spacing .8 lines. A divider slide can use a photo that bleeds all 3 edges of the right side of the slide. Recommended size of this imagery use is one-half of the slide width. Image can be swapped out using any brand image on www.motorolasolutionscollective.com …crop/size as needed. Directions on page 21.
- More payment cards have been skimmed (financial details hijacked) as a result of PIN pads being replaced. Recent example: PIN pads replaced at a fast food chain to steal payment card details The breach occurred at a fast food chain in a busy part of Edmonton, Canada. A "Bluetooth" device was used in the phony PIN pads to transmit all the card details, using a wireless connection. The fraud was discovered when a large number of Edmonton cards started showing up with unusual activity in Montreal.”
- Windows 7 (all versions - Starter through Ultimate) provide Virtual Wi-Fi with the operating the system, essentially allowing any desktop user to setup a Virtual Wireless Access Point This is not an adhoc network, but an actually virtual access point that behaves, lives, and breathes like an actual Access Point
- The Motorola AirDefense solution provides 3 fundamental value additions for wireless LANs – robust security & wireless regulatory compliance, cost-effective centralized troubleshooting and performance management, and wireless infrastructure management. <Read though the bullets>