Wireless Auditing & Risk Assessment - created from Mind Map

Page 1

WLAN Discovery Tools

Penetration Testing Tools

Password - Capture & Decryption Tools

Network Management & Control Tools

Attack Tools and Techniques

Network Utilities

Risk Assessment

Security Risk Assessment Stages

security Audits

NetStumbler and InSSIDer

Kismet

HeatMapper

NetStumbler

InSSIDer

Free Windows - based Software utility to locate and interrogate WLANS

Capture service set Identifier (SSID), access point name, GPS setting, MAC addresses

Detect rouge access point

Commercial Wi -Fi network scanning application

Support Windows & Mac OS

Helps with network visualization, optimization & trubleshooting

Wi - Fi scanner (Linux)

Detect and interrogates network

works as network sniffer & detector, intrusion detection system (IDS)

determine network IP ranges

support built - in channel hopping

can "decloak" SSIDs hidden from network

useful for wardriving, site surveys & detecting rogue APs

802.11a

802.11b

802.11g

802.11n

Locates & maps radio frequency (RF) footprint

present coverage overlaid on floor plan, showing gaps & overlaps

Metasploit

Security Auditor's Research Assistant

pentesting tools : look specific weakness

vulnerability scanner : administrator looks to find all known common vulnerabilities & remove

mature network to access state of defense

vulnerability scanner

integrate with National Vulnerabilities Database (NVD) & Nmap

perform SQL injection, Cross - site scripting (XSS) test

Dictionary - style attack

Brute - force attacks

mitigate threat of password cracking

cracks password by comparing combinations of possible characters

inefficient against strong, complex passwords

creating strong password

different passwords different applications

use password management system (PMS) to remember passwords

Wireless Protocol Analyzers

Aircrack - ng

Airshark

Network management systems

security purposes to reveal & locate device

excessive probing & scanning behavior indicate virus infection

built - in protocol analyzer

Dictionary - attack tool

pinpoint TCP conversations & threads

runs network interface in promiscuous mode to capture all traffic on WLAN

provides single viewpoint from administrator can view, plan, configure network

enables use SNMP

Radio frequency jamming

Denial of Service

Hijacking devices

Hijacking a session

Ping

Traceroute / Tracert

Netstat

Ifconfig / Ipconfig

InSSIDer

Hotspot Shield

assessment Process

determine any change in requirements, technologies / threat

determine risk

conduct security risk assessment

WLANs

all asset related to the system / network

known threats affect the security of the system / network

system / network vulnerabilities

potential impact & levels of risk associated with threat

required measures to mitigate the vulnerability & threat

theft data

virus, worms, Trojans

leakage of critical information

Planning

Information gathering

Risk Analysis

Identifying & implementing controls

Monitoring

repetitive checking process occurs throughout cycle

to ensure the organization adheres to its own security policies