[NEWS] Web-style Wireless IDS attacks
- From: SecuriTeam <support@xxxxxxxxxxxxxx>
- Date: 25 Oct 2006 17:08:13 +0200
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
The SecuriTeam alerts list - Free, Accurate, Independent.
Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html
- - - - - - - - -
Web-style Wireless IDS attacks
------------------------------------------------------------------------
SUMMARY
Sergey Gordeychik wrote an article describing Wireless intrusion detection
systems (WIDS) today and possible attack vectors.
DETAILS
Introduction:
Wireless intrusion detection systems (WIDS) are not yet as popular as
their wired counterparts, but current trends would suggest that their
number is set to grow. One positive factor in this respect is the
integration of such programs with active network equipment and Management
awareness of the risks associated with the unauthorised use of wireless
devices. This awareness has led to an increase in the number of WIDS
installations - even where wireless networks are not used.
In view of this situation, specialists in the field of security are now
aware of the need to evaluate not only the quality features of any
product, but also of the need to predict any possible negative influence
arising from its implementation on the security of a corporate network.
This article looks at the results of research into wireless intrusion
detection systems from the point of view of the specialist in the field of
applications security. Design faults discovered are not discussed in the
article as their correction requires significant effort on the part of the
manufacturer.
Full article:
<http://maxpatrol.com/download/Web-WIDS-ENG.pdf>
http://maxpatrol.com/download/Web-WIDS-ENG.pdf
ADDITIONAL INFORMATION
The information has been provided by Sergey Gordeichik.
The original article can be found at:
<http://maxpatrol.com/download/Web-WIDS-ENG.pdf>
http://maxpatrol.com/download/Web-WIDS-ENG.pdf
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@xxxxxxxxxxxxxx
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@xxxxxxxxxxxxxx
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.
- Prev by Date: [EXPL] Cisco VPN Concentrator 3000 FTP Server Remote Manipulation (Exploit)
- Next by Date: [UNIX] Cisco Security Agent for Linux Port Scan DoS
- Previous by thread: [EXPL] Cisco VPN Concentrator 3000 FTP Server Remote Manipulation (Exploit)
- Next by thread: [UNIX] Cisco Security Agent for Linux Port Scan DoS
- Index(es):
Relevant Pages
|
|
