Wireless networks are vulnerable to the following specific security attacks:
Attack Description
Rogue access point A rogue access point is any unauthorized access point added to a network. Examples include:
• An attacker or an employee with access to the wired network installs a wireless access point on a free port. The access port then provides a method for remotely accessing the network.
• An attacker near a valid wireless access point installs an access point with the same (or similar) SSID. The access point is configured to prompt for credentials, allowing the attacker to steal those credentials or use them in a man-in-the-middle attack to connect to the valid wireless access point.
• An attacker configures a wireless access point in a public location, and then monitors traffic of those who connect to the access point to capture sensitive information such as usernames and passwords.
Be aware of the following to mitigate and protect your network against rogue access points:
• Monitor the radio frequencies in your area to identify access points broadcasting in your area.
• Put access points in separate virtual LANs and implement some type of intrusion detection to help identify when an attacker is attempting to set up a rogue access point or is using a brute force attack to gain access.
• When you find an unauthorized access point, unplug the Ethernet cable on the access point to disconnect it from the wired network.
A rogue access point that is configured to mimic a valid access point is known as an evil twin.
Data emanation Specific threats associated with data emanation (i.e., where wireless signals might be received far beyond the intended area of coverage) include:
• War driving is a technique that hackers use to find wireless networks. They use detection tools that locate wireless access points within an area, even if the SSID broadcast has been