October 27, 2004

Policing the Airwaves: Intrusion Detection Systems (IDSs)

...a wireless IDS sensor shows all active APs (wireless access points)and client stations that broadcast signals within its range regardless of whether those devices are part of your network. A sensor can determine whether APs and client stations are using encryption and if so, what kind, and it can determine what type of wireless frequencies and channels are in use. A sensor can also detect rogue devices, intrusion attempts, network probing, wireless attacks, and more.
You can use the central management console of some wireless IDS systems to instruct sensors to initiate countermeasures that will prevent APs from functioning or will prevent specific client stations from connecting to your wireless APs. To block client stations and rogue APs, a wireless IDS broadcasts data so as to initiate a Denial of Service (DoS) attack against the devices. But you should use such blocking with extreme caution because intentionally inflicting a DoS might cause someone, such as an innocent neighboring business or one of your company's own employees visiting from another office, undue harm.
-detailed press release on 3 IDSs with prices
~APs can also be cell phones, automatic automobile locks, GPSs, garage-door openers, ATMs, gas pumps, walkie-talkies, etc., as well as sensors? Forget about planting tracking devices (which have there own electronic 'signature') with IDSs you can track people and vehicles within range based on the frequency and channels of the wireless devices they'ld ordinarily use?

Posted by Cieciel at October 27, 2004 05:32 AM