Wireless Site Audit
Conducting a simulated wireless network security breach or a mock WLAN break-in testing
Penetration Testing | Wireless Security | Wireless Site AuditAs wireless-networking technology evolves, so do the threats that a WLAN faces from intruders.
A wifi network that may have been once certified to be "fully-secured" (has anyone actually spotted a thing called fully secured wireless network?) may now very well be a free-for-all community WLAN -thanks to new hacking tools/scripts or exploits that may have been developed and released since then.
It would be highly advisable; therefore, to periodically evaluate your wireless network's security using the latest security tools, identify its weaknesses, and bolster it up as may be necessary.
The fact is, there is no such a thing as a fully secured wireless network. There are only two types of wireless networks: (1) Highly Vulnerable, and (2) Less Vulnerable. Considering that all data packets (including authentication packets) traversing a WLAN can be silently gathered by an intruder for as long as (s)he may find it necessary, it should be assumed that your network perimeters would be breached if the intruder were motivated enough. All you can do, therefore, is to make it as difficult as you possible can for someone to breach your network.
Wireless Security Audits: Wireless Network (WLAN) Threat Assessment Audits
Wireless Security | Wireless Site Audit | Wireless Network MonitoringPeriodic Wireless Network Security Audits or Wireless LAN (WLAN) Threat Assessment Audits allow you to periodically check out the security (or a lack therefor) of your WLAN. It is prudent to assume that any device connected to a WLAN is always exposed to outside threats. It is important, therefore, to follow a well-thoughtout schedule that call for detailed, and frequent security audits of your WLAN.
When we conduct a WLAN Security Audits (often unannounced to most of the staff) at any of our customer's site, we test for (among other things) rogue Access Points (APs). If we find a rogue AP, we investigate it immediately. It is not uncommon for rogue APs to be introduced (intentionally or unintentionally) by someone on your staff who may be just trying to install, configure, or test an AP. They can also be introduced by someone trying to launch a classic man in the middle attack.