Feeds

Beware the rogue access points

Wireless security headaches

  • alert
  • submit to reddit

Designing a Defense for Mobile Applications

Wireless LANs will continue to be a major security headache for businesses over the next few years, despite the introduction of improved security standards. Inadequate policies and poor installation, rather than inherent security weaknesses, are the main problem.

The misconfiguration of WLAN access points and client software will account for 70 per cent of successful WLAN attacks in the next two years, according to Gartner. Updated security policies that address the particular demands of the mobile workplace must drive security for WLANs and personal digital assistants (PDAs), the analyst firm advises..

"Whether hackers are able to enter a company's WLAN through an unprotected AP (access point) or through a peer workstation, once they are associated with the network, they will be difficult to detect because they may not be visible in or near the network site," said John Pescatore, Gartner veep. "A clever hacker will play it safe and use the company's resources quietly, and as a result, may never be found."

Businesses must ensure there are no unauthorized (rogue) wireless access points on their network and that APs are configured securely. In dense environments, companies must ensure that their users don't connect to the networks of other companies or vice versa. The least expensive - and least effective - way of doing this is to buy a wireless sniffer handheld and walk the perimeter of the network. The most expensive - and most secure - is to install wireless intrusion detection sensors, according to Gartner. ®

Related stories

Attack of the bandwidth-hogging hackers
Wi-Fi group to update WLAN spec
London Wi-Fi security better (but still not great)
Rogue WLANS the next security battlefield?

Securing Web Applications Made Simple and Scalable

More from The Register

next story
Google Nest, ARM, Samsung pull out Thread to strangle ZigBee
But there's a flaw in Google's IP-based IoT system
Orange spent weekend spamming customers with TXTs
Zero, not infinity, is the Magic Number customers want
Want to beat Verizon's slow Netflix? Get a VPN
Exec finds stream speed climbs when smuggled out
US freemium mobile network eyes up Europe
FreedomPop touts 'free' calls, texts and data
'Two-speed internet' storm turns FCC.gov into zero-speed website
Deadline for comments on net neutrality shake-up extended to Friday
GoTenna: How does this 'magic' work?
An ideal product if you believe the Earth is flat
NBN Co execs: No FTTN product until 2015
Faster? Not yet. Cheaper? No data
prev story

Whitepapers

Reducing security risks from open source software
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Application security programs and practises
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.