Re: Wireless spaces

["Paul Melson" <pmelson () gmail com>]

> Are any of the major vendors doing this?
>
> 1. Take any three wireless access points and have them each track client
wireless signal strength. (This will > map to physical space almost) 

You can do this with Cisco/Airespace switches.  They will triangulate
clients and rogue access points.  Plus you can upload purdy maps to WCS and
overlay triangulation with floor plans, campus maps, pictures of your dog,
etc.

> 2. At the same time, have them track traffic type this client is doing and
use this to generate a number of 
> some sort.
> 3. Map these four things into a space and all your clients will be divided
into "rooms" that you can draw 
> bounding boxes around (much like Reliance HIDS did).
> 4. Do simple anomaly detection and you'll see a SILICA user in the parking
lot stand out like a Suicide Girl 
> in Utah.
>
> I think if you can tie the traffic clients generate with "where" the
clients are, you'll get an interesting 
> picture of things in general.
> You don't care in real world terms where they are, just where they are in
the mathematical space.

I don't know a single vendor today that has sniffer, IDS, SIM, and
triangulation built into their product.  I can't imagine that'd be a
profitible niche.

PaulM


_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave