Risks of Wireless Access Points

1
Risks of Wireless Access Points

• Brian Moeller

2
What is a wireless access point?

• A device that uses a radio to allow access to a
  network

3
Apple Airport
4
Apple Airport in the wild
5
Cisco Wireless Access Point
6
Cisco Wireless Access Point Front View
7
Linksys
8
Netgear
9
Apple Powerbook Laptop
10
Why scan for wireless?

• Inventory Access Points and get a rough idea of
  how theyre secured
• Plot their locations
• Experiment with new wireless Scanning software

11
Why scan for wireless?

• Get an idea of how wireless is being used on
  Campus
• Prove/disprove that wireless implementations are
  secure or not secure
• Demonstrate scanning technology and methods

12
The Scanning process

• Laptop
• Wireless card (Orinoco/Lucent Silver, in this
  scan)
• Small external antenna
• Golf Cart
• Map of Campus

13
The Scanning process

• Added GPS
• GPS gives location data via satellite
  triangulation
• Accuracy usually around 15ft.

14
The Scanning Process
15
The Scanning Process
16
The Scanning Process
17
The Scanning Process

• How the scan works
• Software looks for SSID (Service Set Identifier)
  broadcasts
• Polls access point for configuration, names, and
  any other information its willing to share
• Does NOT request IP address

18
So, make your point

• Wireless common around Campus
• Good system administration practice is
  questionable
• Many appear to be merely unpacked, and plugged in
• Most not running authentication or encryption

19
Campus Wireless Scan Results

• Total of 122 Wireless Access Points found
• 45 encrypted (WEP)
• 77 Not Encypted

20
Campus Wireless Scan Results

• 35 Access Points appear to have factory default
  settings

21
(No Transcript)
22
Conclusion

• Many wireless access points on campus
• Channel contention may be an issue
• No standardized configuration

23
Conclusion

• Security issues
• Authentication
• Authorization
• Accountability
• Integrity
• Confidentiality