WirelessSecurity

Last edit December 20, 2006

WirelessSecurity is a page on security concerns for WirelessDevices. Generally speaking, security concerns that apply to NetworkSecurity are relevant, and in addition, system implementators need to be conscious of additional challenges inherent in various wireless (radio or satellite based) methods.

See also WebApplicationSecurity

Resources

News

RFID (RadioFrequencyIdTags) vulnerability Exposed. see http://enterprise-security-today.newsfactor.com/story.xhtml?story_title=RFID-Vulnerability-Exposed&story_id=30105&category=mobsec
WiFi "Evil twin" (Wiphishing - a phishing scam relative, see section under SocialEngineering) waiting vulnerability at hotspots
- see WiFiAlliance paper on use of WPA to reduce exposure, at http://www.wi-fi.org/membersonly/getfile.asp?f=Wiphishing_For_Web_2.pdf
- It is said FireWall and IT shop installed AV, VPN combination insufficient to protect against bogus hotspots. Recommend to use 802.1x scheme to overcome lack of inspection of wireless headers of existing tools. Sourced from article at http://searchsecurity.techtarget.com/originalContent/0,289142,sid14_gci1046861,00.html

General items

MS wireless and mobile security resources http://www.microsoft.com/technet/security/topics/network/wirelsec.mspx
profile of WirelessSecurity implementation landscape at http://www.computerworld.com/mobiletopics/mobile/laptops/story/0,10801,97352,00.html?source=x595
audio on security related to WindowsMobile at http://www.net-security.org/article.php?id=745
Future (post 2004) threats see http://informationweek.com/story/showArticle.jhtml?articleID=54201336

Deployment and UseCases

Different security needs for a public library: responses by several vendors exist at http://www.nwfusion.com/columnists/2004/0712wizards1.html

WirelessSecurity is still far from practical. Someone in Germany demonstrated recently he can duplicate all the information in an electronic passport. Until InformationTheft can be reliably detected in a timely manner, I am pessimistic about its use in security sensitive applications.

CategorySecurity CategoryWireless