A rogue wireless station is an unauthorized station connected to a network via an access point. The access point used for connectivity can either be a rogue access point or an authorized access point.

Unless the security of the wireless network is very weak, it can be assumed that a rogue access point also exists and is connected to the network. The rogue access point is usually configured to mimic valid access points settings (at the minimum the same SSID as the wireless network) to prevent the rogue access point from being detected by basic wireless discovery tools.

Most network systems are configured to trust devices that are on the inside of the network. This trust/untrust relationship between devices inside/outside the network perimeter is completely destroyed by wireless technologies.

Once inside, the attacker has access to information that would be very difficult to access as an outsider. Unless the internal systems have sophisticated host based security the attacker can collect the information and disconnect from the wireless network without being detected.

• Rogue Access Point Detection Using iWIDS
  Rogue Access Point Detection Using iWIDS iWIDS is an online wireless instrusion detection system (WIDS) that leverages the wireless scanning capabilities of a Windows XP/Vista/7...
• DoD Commercial WLAN Technologies Instruction 8420.01
  DoD Commercial WLAN Technologies Instruction 8420.01 The US Department of Defense (DOD) released a commercial wireless local area network (WLAN) devices, systems, and technologies...

If you liked this post, subscribe using below

WLAN Book RSS Feed

WLAN Book by Email

Filed under: WLAN Security