Re: wlan ids

From: Jérôme Tytgat (j.tytgat@energis.fr)
Date: 10/23/02 

From: Jérôme Tytgat <j.tytgat@energis.fr>
To: "cyclon jet" <cyclonjet@hotmail.com>, <focus-ids@securityfocus.com>
Date: Wed, 23 Oct 2002 08:50:55 +0200

Are you talking about wep encryption ?

I think it should work as it does not need a lot of ressources
to be decrypted...

The Wlan IDS will need to recognize you wlan network (SSID / WEP
passphrase, maybe MAC ACL), but in fact it's directly at the
level of the network card these things are done, so I don't see why it
should not work.
The IDS will not even "know" that encryption is on...

That's my 2 cents.

Jerome

----- Original Message -----
From: "cyclon jet" <cyclonjet@hotmail.com>
To: <focus-ids@securityfocus.com>
Sent: Tuesday, October 22, 2002 8:21 AM
Subject: wlan ids

> Hi,
>
> Will wireless ids actually help in protecting WLAN if encryption is
already
> on?
> Has anyone come across airdefense?
> Any feedback about their wireless ids?
>
> Regards,
> cj
>
> _________________________________________________________________
> Unlimited Internet access for only $21.95/month. Try MSN!
> http://resourcecenter.msn.com/access/plans/2monthsfree.asp
>
>

Relevant Pages

  • RE: Building the Perfect IDS - blacklisting
    ... authenticate a packet than it does to generate a bogus packet, ... the DoS flood. ... Building the Perfect IDS - blacklisting ... one word: encryption. ...
    (Focus-IDS)
  • RE: ssh and ids
    ... box is the termination point of the SSL tunnel. ... Subject: ssh and ids ... Your claim is only partially true Peter. ... Encryption remains the bane of network-based intrusion ...
    (Focus-IDS)
  • RE: ids inquisition
    ... Dozens of IDS companies out there are merketing millions of dollars ... worth of contracts consisting of NIDS and HIDS solutions, ... from an IDS perspective are at a network layer where encryption is not ...
    (Focus-IDS)
  • RE: ssh and ids
    ... Note that SSL decryption is available in both IDS and IPS ... Encryption remains the bane of network-based intrusion ... "long duration" flow, a behavior-based system can pinpoint those ... connections that seem to be "out of the norm". ...
    (Focus-IDS)
  • RE: Encrypted packet friendly IDS ?
    ... Subject: Encrypted packet friendly IDS? ... of doing the SSL/TLS encryption, thus clear text is passed to the server ...
    (Focus-IDS)