2KKUU7ita

Chapter 9: Wireless LANs
encryption keys locally. Most of the well-known wireless client vulnerabilities
have been patched by their respective vendors, but you never know whether
all your wireless systems are running the latest (and usually safest) versions
of operating systems, wireless client software, and other software applications.
In addition to using the wireless client, stumbling, and network analysis software
I mention earlier in this chapter, you should also search for wireless
client vulnerabilities by using various vulnerability testing tools, such as GFI
LanGuard, QualysGuard, and Acunetix Web Vulnerability Scanner.
These programs aren’t wireless-specific, but they might turn up vulnerabilities
in your wireless computers that you might not have discovered or
thought about testing otherwise. I cover operating system and application
vulnerabilities as well as using the tools in the preceding list in Parts IV and V
of this book.
Countermeasures against vulnerable
wireless workstations
You can implement the following countermeasures to keep your workstations
from being used as entry points into your WLAN:
✓ Regularly perform vulnerability assessments on your wireless workstations,
in addition to other network hosts.
✓ Apply the latest vendor security patches and enforce strong user passwords.
✓ Use personal firewalls and endpoint security software on all wireless
systems where possible, including smartphones and tablets, to keep
malicious intruders off those systems and out of your network.
✓ Install anti-malware software.
Default configuration settings
Similar to wireless workstations, wireless APs have many known vulnerabilities.
The most common ones are default SSIDs and admin passwords. The more
specific ones occur only on certain hardware and software versions that are
posted in vulnerability databases and vendor websites. Many wireless systems
still have WEP and WPA disabled by default as well.
183