Consulting

Wireless Security Audit Overview

The security audit comprises collecting information about the wireless LAN and providing feedback on the type of information others can readily gather about you and your network. Integral Wireless Solutions analyzes security gaps and produces a detailed report with recommendations for improving security.

Wireless Security Audit includes:

Review existing security policies / access point configuration
Detect and identify the wireless network including channels and ESSID
Determine if WEP is enabled on all remotely accessible access points
Inspection of the beacon broadcast frame and record the information it broadcasts
Monitor for rogue access points from outside or inside the building
Monitor network perimeter for signal leakage into unwanted areas
Collect IP or MAC addresses of access points and clients
The WSA is performed on-site to expose security risks in wireless LAN implementations.

The following steps describe the elements of a Wireless Security Assessment (WSA):

Access Point Discovery – An on site analysis to determine signal strength of wireless access points in an around the company’s physical premises.
Probing, Authentication and Association – Access points are probed to initiate the connection process. Authentication methods are analyzed and attempts are made to open a connection. SSIDs and MAC addresses are enumerated from wireless transmissions. Use of encryption (WEP) is determined.
Penetration Assessment – Armed with the aforementioned information, additional information is gathered to enumerate potential vulnerabilities in system configurations, user accounts, network services and applications.
Manual Validation – Our security analysts manually validate findings, confirming security holes, discarding false positives, and uncovering vulnerabilities not detected by the standard scanning tools and methods.
Map all existing 802.11b coverage to validate and ensure migration to 802.11g technology will be supported in existing deployment.

Report Preparation – Finally, our security analysts prepare a detailed and actionable report on the findings. The report contains a summary outlining the main results, a list of prioritized action items, and full details of all security risks discovered and appropriate remediation advice.