Friday, February 9, 2007

RSA Conference - A Place for Security Professionals to Really Mess Up

Followup.

Unfortunately, over half of the devices at the RSA Conference were themselves unsecure.

AirDefense, the innovator and market leader in anywhere, anytime wireless security, today unveiled results from its wireless airwave monitoring on Tuesday, February 6 at the RSA Conference, the world’s leading information security conference. AirDefense studied the wireless LAN traffic throughout the day Tuesday and found more than half of the 623 or 347 wireless devices, such as laptops, PDAs, phones and vendor PCs susceptible to “Evil Twin” types of attacks, combined with some of the latest zero-day attacks. In total, 56 percent of the 623 devices in use could have easily been compromised....AirDefense discovered 70 devices participating in Ad-Hoc networks (Peer-to-Peer) using common SSID’s (Service Set Identifiers) such as “Free Public WiFi,” “Free Internet Access” and “Linksys.” Not only is this a security issue, typically this means that no firewall is present on the wireless interface or it is an un-patched Windows system. In other words, low hanging fruit for an attacker.

Ouch.

rsaconference

Sphere: Related Content

0 comments: