Asia Converting Wired to Wireless Attacks
at a Higher Rate than Anticipated

AirDefense discovers finding at Asia's Hack in the Box Conference

Kuala Lumpur - October 14, 2004 - AirDefense, the leader in 24x7 wireless LAN security and monitoring discovered the Asia market is more familiar with wireless attacks than expected while collecting data at Hack in the Box, Malaysia's first and only non-profit network security conference, last week.

"Asia has typically lagged behind North America in wireless adoption by as much as six months to a year, however the types of attacks we are seeing are indicative that Asia realizes the same attacks that can be launched on the wired network transfer to the wireless environment," said Richard Rushing, chief security officer of AirDefense. "We have seen wired side attacks on the wireless in the past, but never at such an alarming rate. People at this conference exhibited a near hostile behavior when using wired tools to attack the WLAN."

Rushing hypothesizes the more sophisticated attacks are due to more practice on the part of the hackers commenting, "To exploit the network hackers needs access to the network itself -- a university network, public library or most likely a hotspot. Once hackers are on the network they have to learn how to break or manipulate the VPN (virtual private networks). From those experiences hackers have created VPN manipulation tools that cause denial of service and classic man-in-the-middle attacks that redirect users from their intended connection to a stranger acting as the legitimate connection."

AirDefense also identified on of the first occurrences of the intersil chipset modification, the most prevalent 802.11b chipset. The modification of the chipsets breaks the 802.11 standard causing confusion for the chipset. Modified chipsets experience a constant chattering or jamming creating a denial of service and thereby preventing the device from communicating with an access point.

Throughout the day AirDefense studied the wireless LAN and identified more than 184 unique wireless devices attempting to connect to 48 access points (APs). Additionally AirDefense tracked and identified usage patterns, network bottlenecks and problematic stations and access points, indicative of the interference, performance degradation and impending risks, including:

  • 115 Denial of Service attacks
  • 91 separate attacks on different devices, many of these MAC spoofing attacks
  • 24 Ad hoc networks comprised of 9 stations
  • Two Soft access points
  • Four large mesh networks with an average of 15 personal computers connected to each

"Sharing information such as this should alert companies to the ease with which hackers have learned to exploit the vulnerabilities of wireless LANs to break into an organization's networks. Organizations need to understand hackers enter through wireless backdoors rendering the millions of dollars spent of firewalls and wired intrusion detection systems obsolete. It is critical for organizations to monitor and protect their wireless network in order to ultimately maintain the security of wired side data," said Anil Khatod, chief executive officer of AirDefense.

About AirDefense, Inc.
AirDefense is the thought leader and innovator of wireless LAN security and operational support solutions. Founded in 2001, AirDefense pioneered the concept of 24x7 monitoring of the airwaves and now provides the most advanced solutions for rogue WLAN detection, policy enforcement, intrusion protection and monitoring the health of wireless LANs. As a key element of wireless LAN security, AirDefense complements wireless VPNs, encryption and authentication. Based on a secure appliance and remote sensors, AirDefense solutions scale to support single offices, corporate campuses or hundreds of locations. Blue chip companies and government agencies rely upon AirDefense solutions to secure and manage wireless LANs around the globe. For more information, go to http://www.airdefense.net or call 770.663.8115.

Media Contacts:
Heidi Litner
AirDefense, Inc.
770.663.8115 x 110
hlitner@airdefense.net

AirDefense is a registered trademark of AirDefense, Inc. All other trademarks are property of their respective owners.




AirDefense Partners www.airdefense.net