In 2001, Peter Shipley and Matt Peterson moved around San Francisco with a WiFi-enabled laptop for a week with a program which detected unsecure wireless networks. The results of their study were shocking. They concluded that more than 80% of the wireless networks were not secured. In 2005, another study estimated that this number had grown to nearly 90%. With the adoption of wireless technology rising rapidly, security is likely to become a significant bottleneck while deploying enterprise wireless networks.
The 802.11i specification for wireless security is pretty good as it provides for better authentication and better encryption with AES (which is considered to be unbreakable at this point). Wireless IDS (Intrusion Detection Systems) have grown better over the last few years with capabilities like rogue device detection and device classification. While there is currently no metric for measuring wireless security, it is wise to follow industry-standard best practices, have a security checklist and do baseline and penetration testing periodically.
It is also important for wireless security professionals to update their knowledge regularly, get certifications on related technologies and practice real-life scenarios before actually doing any enterprise-level wireless infrastructure deployment.
IT Conversations' publication of this program is underwritten by your donations and:
 |
Devin Akin is Chief Technology Officer of Planet 3 wireless. He is also the technical editor for the Osbourne series CWNA Certified Wireless Network Administartor, CWSP Certified Wireless Security Proffessional & CWAP Certified Wireless Analysis Professional official study guides. He has accrued almost 10 years of in-depth networking experience. and holds many of the industry’s most esteemed networking certifications, during the last 4 yrs he has been doing in-depth research and attending manufacturer-led classes on wireless LAN networking. He is considered a top authority on wireless LAN technology.
Resources:
This program is from our Frontline Security series.
For Team ITC:
This free podcast is from our Frontline Security series.