Opinion

Wi-Fight It?

CSOs struggling with wireless need an attitude adjustment.

By David H. Holtzman

It may not take 10 years for this technology to reach critical mass; I'd guess it's more like two to three. Unfortunately, the security mind-set shift from physical prohibition to information control will take longer than that.

Here are some attitude changes for the evolving CSO to consider.

Presence is not permission. Don't assume someone on a network is a legitimate user any more than you would believe that walking through a hotel lobby certifies a person as a guest.

The smaller the granularity, the better the security. Packet and transaction authentication is effective; stream and session is not. Be aware of every device in an organization that can transmit data, and know what could be done with that information if it's divulged to a knowledgeable person.

Packet-pickers aren't thieves. Bandwidth is often seen as a public resource, and people who would blanch at the thought of breaking into a computer room wouldn't think twice about jacking into wireless networks. Recognize that the motivation is not the same as hackers. Companies shouldn't condone the practice but don't need to be overzealous about stopping it either.

Be thoughtful, not combative when confronted with the rapid dissemination of wireless technologiesit's like quicksand, struggling will only drag you down deeper.

• Email
• Print
• Comments
• Digg This
• SlashDot

• Wireless Security: The Basics
• Researcher: BT Home Hub Wi-Fi Security Easy to Crack
• How to Combat Five Network Security Compliance Risks
• Making Sense Of Wireless IPSs
• The Deperimeter Problem