Wireless Network Vulnerability Assessment

The Computer Security Institute recently reported that, while all forms of cybercrime are costly to victimized businesses, wireless exploitation captured first place in 2009 at an average cost of $770,000 per incident. The good news is that the volume of wireless exploits declined to 7.6% in 2009, down from 14% the previous year—no doubt aided by the growing popularity of wireless/Wi-Fi security assessments.

Today’s organizations are increasingly sensitive to cybercrime attacks and identity theft by hackers who maliciously exploit wireless LANs and Wi-Fi hotspots. The infamous TJ Maxx breach occurred via wireless router, and the hacker had undetected access to the network for more than a year—as just one example.

Most organizations maintain datamines of confidential information and conduct e-commerce with customers and other enterprises. Many have deployed wireless user devices, such as laptops and smartphones, as well as wireless networks to support an increasingly mobile workforce.

About the Wireless Assessment

A Wi-Fi Assessment from SECNAP is a vital step in securing your information assets. The SECNAP Wi-Fi Assessment includes an inventory of wireless routers, as well as nearby wireless connections, which can make your network vulnerable. Our certified auditors also review your wireless policies and suggest improvements.On completion, a comprehensive report documents vulnerabilities and recommends prioritized remedial actions so that your IT team can address the most significant risks immediately. Leveraging this service on a regular basis can help you maintain the most current and effective protection for your information assets—while supporting the increasing mobility of your workforce.

Wireless networks are a wild card, especially when part of an overall network infrastructure. Despite current standards for wireless (IEEE 802.11), substantial data compiled regarding wireless security demonstrates that wireless is not inherently safe out of the box. Additional configuration is required and, even then, wireless networks are not as secure as other network types at the present time. SECNAP Wi-Fi Assessments are conducted by experienced, professionally certified SECNAP security auditors, and are designed to:

•  Provide an objective, expert view of your wireless security landscape, including access points

•  Identify and prioritize vulnerabilities and risks

•  Provide actionable recommendations

•  Outsource testing so that your IT staff can continue to focus on mission-critical work.

As wireless technologies become increasingly integral to commercial communication, more businesses are deploying wireless networks. As usage continues to rise and wireless devices proliferate, configuration errors and other vulnerabilities will also proliferate, and security safeguards will be challenged to keep pace. Intelligent businesses understand that their networks may be breached by negligent insiders, particularly through rogue wireless access points, as well as malicious outsiders. Preventing unauthorized intrusion, and inadvertent lapses by wireless users, is vital to maintaining data security and privacy.

Sample Elements of the Wi-Fi Assessment

• Review wireless security policy

• Review employee awareness of wireless network capabilities and security flaws

• Assess risk of existing wireless use policy

• Conduct internal wireless network security analysis and document internal security via 300+ SECNAP-developed wireless tests

• Review external boundary and document physical access to existing wireless areas within the building by unauthorized personnel

• Review wireless footprint and identify nearby access points for future reference

• Conduct inventory of all WAPs detected within assessment area, type of encryption used, whether legitimate or rogue

• Validate and review SSIDs

• Suggest times for wireless devices to be off during after-hours/weekends

• Suggest strengthened security configurations for known wireless routers, as applicable

• Review and recommend encryption key sizes

• Review and recommend cryptographic authentication and privacy features as needed

• Conduct external non-intrusive security assessment of wireless networks (intrusive security assessment on request)

• Attempt to crack wireless keys and document weak keys

• Report results and provide detailed recommendations for remediation, prioritized in terms of urgency

Delivering Actionable Results

The SECNAP Wi-Fi Assessment will ensure that your wireless network is tested professionally and comprehensively. Our detailed report will provide a complete picture of current vulnerabilities and the actions you can take to resolve them.

SECNAP also offers Internal Network Vulnerability Assessments, External Penetration Testing and Rogue Access Point Detection, which can be conducted in concert with the Wireless Assessment for a 360^o view of your network security environment.

Click here to request more information or a free consultation.