|
The vulnerabilities of wireless access create gapping holes in your enterprise IT security, whether you've implemented sanctioned WLANs or not. Unfortunately, ignoring this fast-growing threat doesn't make it go away. Simply said, ignorance is risk.
Let's face it, wireless is pervasive. Low cost wireless access points are readily available at your corner consumer electronics store. These devices often find their way onto enterprise networks by often well-intentioned employees. Sometimes they get attached with malicious intent. In either case, a rogue AP on your network is like putting a network Ethernet jack out in the street for anyone to connect to. With this type of low-level network access, it's easy for a hacker to probe for all types of vulnerabilities and to exploit them.
Well, can't you just scan every so often for these rogues and be done with it? We only wish it were that easy. It is not uncommon for a rogue AP to be temporarily attached then disconnected after use to avoid being detected by periodic scanning. Traditional wired-side scanning technique won't work for many types of rogue APs because there are so many vendor variations, particularly in the dumb consumer-grade segment. Even networked devices appearing to be legitimate may actually be a rogue AP. Furthermore, software that is readily available can turn any networked PC into a "soft AP." Also, any networked PC can be enabled to act as a wireless bridge providing a gateway for others to gain access to the network.
But the wireless threat doesn't stop with your network. In fact, that's only half the problem. Portable computing devices, now the standard productivity tools for the mobile worker, come loaded with wireless connectivity options. Practically every new laptop now comes with built-in Wi-Fi and Bluetooth connectivity. Smart phones and PDA support similar wireless options. Designed for networking simplicity, these devices are typically set to wirelessly connect to anything it sees in the air, whether legitimate or not. Hackers specifically look for these "wireless nymphs" and use an arsenal of automated malware to divert such devices to connect to them instead. Connections could be standard Wi-Fi, ad-hoc, Bluetooth, etc. Once connected, the hacker can take control of the mobile device and begin stealing sensitive files from the hard drive, or loading a malicious Trojan horse (e.g. to log keystrokes) or a virus. Worse yet, the user may not even be aware this is all happening, whether they're at a airport or hotel hot-spot, at home, or even in the "comfort" of their business office.
For many hackers today, wireless access is low hanging fruit. Stop ignoring the wireless threat and protect your organization's resources and sensitive data. Wireless threat protection and attack prevention can be highly effective, easy to deploy and operate, and economically scalable to protect your wireless network, data, and users across your entire enterprise. As the wireless security experts, Network Chemistry is here to help.
|
 |
