Wireless Security

WirelessSecurity is a page on security concerns for WirelessDevices. Generally speaking, security concerns that apply to NetworkSecurity are relevant, and in addition, system implementators need to be conscious of additional challenges inherent in various wireless (radio or satellite based) methods.

See also WebApplicationSecurity

---

Resources

News

• RFID (RadioFrequencyIdTags) vulnerability Exposed. see http://enterprise-security-today.newsfactor.com/story.xhtml?story_title=RFID-Vulnerability-Exposed&story_id=30105&category=mobsec

• WiFi "Evil twin" (Wiphishing - a phishing scam relative, see section under SocialEngineering) waiting vulnerability at hotspots
  • see WiFiAlliance? paper on use of WPA to reduce exposure, at http://www.wi-fi.org/membersonly/getfile.asp?f=Wiphishing_For_Web_2.pdf
  • It is said FireWall and IT shop installed AV, VPN combination insufficient to protect against bogus hotspots. Recommend to use 802.1x scheme to overcome lack of inspection of wireless headers of existing tools. Sourced from article at http://searchsecurity.techtarget.com/originalContent/0,289142,sid14_gci1046861,00.html

General items

• MS wireless and mobile security resources http://www.microsoft.com/technet/security/topics/network/wirelsec.mspx

• profile of WirelessSecurity implementation landscape at http://www.computerworld.com/mobiletopics/mobile/laptops/story/0,10801,97352,00.html?source=x595

• audio on security related to WindowsMobile at http://www.net-security.org/article.php?id=745

• Future (post 2004) threats see http://informationweek.com/story/showArticle.jhtml?articleID=54201336

Deployment and UseCases

• Different security needs for a public library: responses by several vendors exist at http://www.nwfusion.com/columnists/2004/0712wizards1.html

---

WirelessSecurity is still far from practical. Someone in Germany demonstrated recently he can duplicate all the information in an electronic passport. Until InformationTheft? can be reliably detected in a timely manner, I am pessimistic about its use in security sensitive applications.

---

CategorySecurity CategoryWireless