Dailydave: Re: Wireless spaces

[Abner Germanow <abner () securitystory com>]

I believe you are looking for something like Newbury Networks' RF Firewall
http://www.newburynetworks.com/products-rf-firewall.htm

Cheers,
Abner


----- Original Message ----
From: Dave Aitel <dave () immunityinc com>
To: dailydave <dailydave () lists immunitysec com>
Sent: Thursday, September 20, 2007 1:12:46 PM
Subject: [Dailydave] Wireless spaces

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Are any of the major vendors doing this?

1. Take any three wireless access points and have them each track
client wireless signal strength. (This will map to physical space almost)
2. At the same time, have them track traffic type this client is doing
and use this to generate a number of some sort.
3. Map these four things into a space and all your clients will be
divided into "rooms" that you can draw bounding boxes around (much
like Reliance HIDS did).
4. Do simple anomaly detection and you'll see a SILICA user in the
parking lot stand out like a Suicide Girl in Utah.

I think if you can tie the traffic clients generate with "where" the
clients are, you'll get an interesting picture of things in general.
You don't care in real world terms where they are, just where they are
in the mathematical space.

- -dave

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFG8qoNB8JNm+PA+iURAu1kAKDR4BJfFya+CqUFqgbNV5QCuhwH3QCglbNq
X/jcsr5cCfbZ5+1sae7g47o=
=mrwt
-----END PGP SIGNATURE-----

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave



_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave