How BYOD Will Shape Wireless Network Security in 2012
- 1. How BYOD will shape wireless network security in 2012? Dr. Hemant Chaskar Vice President of Technology AirTight Networks © 2011 AirTight Networks. All Rights Reserved.
- 2. BYOD! BYOD!
- 4. Why is security a concern with BYOD? Unauthorized smart phones connecting to enterprise network Mobile Wi-Fi hotspots bypassing perimeter security 3G Intrusion threats Extrusion threats Rater, Intr A sion – pun intended!
- 5. Enterprise Wi-Fi: Not a barrier for employee smartphones Two-steps to connect your smartphone to WPA2, 802.1x Wi-Fi? Look up username and password in Wi-Fi utility on laptop. Enter those in your personal smartphone.
- 6. Intrusion threats from personal smartphones Let us start with malware! Android malware grew 472% in 2H2011 – says PCMag
- 7. Intrusion threats from personal smartphones Android malware grew 472% in 2H2011 – says PCMag Even iOS is not safe once “Jailbroken” Your sensitive corporate data could finally end up here! Personal apps reduce productivity, increase risk of data leakage
- 8. Limitations of common security practices MAC ACL Lot of initial work, tedious to manage Mobile Device Management (MDM) Required for IT assigned smartphone devices But, no visibility into or control over personal devices IT Assigned Smartphones Personal Smartphones
- 9. Wireless Intrusion Prevention Systems (WIPS) Eavesdropping Unauthorized Access WPA2 Firewall, Wired IPS Wi-Phishing Honeypots External APs Cracking External Users Rogue AP Misconfigured AP Ad hoc Connections Wireless DoS WIPS
- 10. WIPS architecture Building A Building B Sensor Sensor Server
- 11. With this in place, your network is protected from all types of wireless threats, vulnerabilities and attack tools! External APs Rogue APs (On Network) Authorized APs AP Classification STOP Client Classification Policy Mis-config GO STOP IGNORE DoS External Clients Authorized Clients Rogue Clients AUTOMATICALLY DETECT AND BLOCK RED PATHS! WIPS policy enforcement
- 12. Smartphone monitoring with WIPS
- 13. Authorized APs Authorized Clients Users Smartphone policy enforcement with WIPS User Authentication + Machine Identification Flag/block unapproved devices! GO STOP External APs Mobile Hotspots STOP
- 14. Smart device identification Device type Approved/unapproved status Device/user name MAC address
- 15. Drill down on device details
- 17. Block policy for unapproved smart devices
- 18. Extrusion threats from personal smartphones Detect and block authorized clients from connecting to personal mobile hotspots (iPhone MyWi, Android Mobile AP, etc.) Mobile Honeypot Authorized Client 3G Blocked by WIPS Allowed by WIPS Authorized AP Internet
- 19. Key takeaways BYOD revolution creates new security risks due to use of personal smart devices on enterprise premises WIPS uses combination of device fingerprinting and policy framework to automatically detect and flag/block unapproved personal smart devices in the network WIPS continues to provide comprehensive protection from traditional Wi-Fi security threats such as Rogue APs, Wi-Phishing, ad hoc networks, DoS attacks, device mis-configurations, etc.
Editor's Notes
- #6: Take high resolution picture of this Samsung phone in Pune office. Take another picture of iPhone screen in Pune office.