AirDefense Monitors Airwaves at Wi-Fi
Planet;
Detects Record Number of Attacks
Data Captured Indicates Faster Adoption of Attack
Tools
Baltimore, MD- June 10, 2004 - The Spring Wi-Fi Planet
Conference and Expo has become one of the definitive events of
the Wi-Fi industry and a testing ground for attendees to challenge
the strength of wireless security, noted AirDefense, the leader
in 24x7 wireless security monitoring, who captured wireless data
throughout the first day of the show. AirDefense data determined
that wireless attacks are being adopted faster than ever before
leaving organizations open to even more Wireless LAN (WLAN) breaches
and attacks.
"Wi-Fi Planet is where vendors introduce the latest products,
and where attendees test the latest attacks," said Richard
Rushing chief security officer of AirDefense. "Typically
it takes attack tools six to nine months after release before
they are widely-used among hackers. You may see one or two devices
running newer attacks, but today we detected eight different devices
running Hotspotter, eight Airsnarfing tools and twelve soft APs.
We can deduce that either people are writing better and more sophisticated
tools, or the tools are becoming more portable since they now
operate on multiple operating systems."
Hotspotter, released in May 2004, is a program that redirects
probing stations to the hacker's laptop. Once associated, Hotspotter
can be configured to run a command to scan the new victim's laptop.
Airsnarf, launched at the end of 2003, is rogue AP that can steal
usernames and passwords from public wireless hotspots. The concern
is the captured usernames and passwords can then be misused at
other hotspots of the same provider, leaving the original victims
to pay the bill. Hardware versions of soft APs, released en masse
in second quarter 2004, create connections to laptops acting as
an access point. Once connected, the owner of the soft AP is given
access to the unsuspecting victim.
In addition to these newer attacks, AirDefense detected and identified
usage patterns, network bottlenecks and problematic stations and
access points throughout the day, including:
32 MAC spoofs
23 ad hoc networks
15 Denial of
Service attacks broken out into eight de-authentication and
seven dis-association floods
24 invalid
MAC addresses
A large focus at this year's Wi-Fi Planet is securing the WLAN.
Rushing lead a discussion during the pre-conference sessions advising
attendees how to build strategies to secure the enterprise against
network attacks, intrusions and other security breaches.
"Wireless is entering into organizations regardless of IT's
policy. Whether organizations embrace the convenience of wireless
or not, they need to be aware of the threats wireless causes and
defend their air space like any other corporate asset," Rushing
implored during the session.
"While the numbers of attacks at different conferences may
fluctuate," said Anil Khatod, president and CEO of AirDefense,
"the message is clear - the simplicity of WLANs comes at
the cost of security. WLANs provide significant productivity and
mobility benefits to the enterprise, and the adoption of WLANs
is inevitable. However, attackers are becoming better educated
on the tools available to capture and exploit user data. Organizations
must take note of these vulnerabilities in their networks and
employ a wireless security policy, educate employee's and take
the right steps to secure and monitor for conformance to the wireless
security protocol."
AirDefense studied the wireless LAN traffic and identified 361
unique wireless devices throughout the day connecting to 64 access
points (APs) and a mixture of ad hoc and soft APs. Although significantly
lower in total number of devices than previous monitoring done
by AirDefense at CTIA Wireless and Networld + Interop, the ratio
of access points to wireless - based on the smaller attendance
- is proportional.
About AirDefense, Inc.
AirDefense is the thought leader and innovator of wireless LAN
security and operational support solutions. Founded in 2001, AirDefense
pioneered the concept of 24x7 monitoring of the airwaves and now
provides the most advanced solutions for rogue WLAN detection,
policy enforcement, intrusion protection and monitoring the health
of wireless LANs. As a key element of wireless LAN security, AirDefense
complements wireless VPNs, encryption and authentication. Based
on a secure appliance and remote sensors, AirDefense solutions
scale to support single offices, corporate campuses or hundreds
of locations. Blue chip companies and government agencies rely
upon AirDefense solutions to secure and manage wireless LANs around
the globe. For more information, go to www.airdefense.net or call
770.663.8115.
Media Contacts: Heidi Litner
AirDefense, Inc.
770.663.8115 x 110
hlitner@airdefense.net
AirDefense is a registered trademark of AirDefense, Inc. All
other trademarks are property of their respective owners.