Archive for the ‘Education - Éducation’ Category

Cisco WLAN bridge

03.08.10

For my students: the default password on the Cisco bridges is default username and password is Cisco” with a capital C

  • Share/Bookmark

WLAN Fundamental slides

02.22.10

For my Champlain College Wireless students in the WLAN fundamentals class starting today

http://su.pr/1T9qKe

  • Share/Bookmark

IP Port numbers

02.22.10

This is added for students. It provides a list of al known IP ports.

  • Share/Bookmark

Peter L. Bernstein on risk

02.13.10

The celebrated author of Against the Gods: The Remarkable Story of Risk explores the history of risk and how it works in real-world markets and in our lives.

Risk doesn’t mean danger—it just means not knowing what the future holds. That insight resides at the core of risk management for companies, whether in managing the potential downside of an investment or putting a value on the option of waiting when making irreversible decisions. In this video Peter L. Bernstein also explains why in the real world the most sophisticated mathematical models can sometimes fail.



  • Share/Bookmark

Biometrics: Solutions for Security and Authentication

02.11.10

FYI: Webinar on February 15 Space is limited.

Reserve your Webinar seat now at: https://www2.gotomeeting.com/register/702895155

This webinar will provide an overview of the study of methods for uniquely recognizing humans based upon one or more intrinsic physical or behavioral traits. I will present the fundamentals of biometrics and biometric systems. The course will delve into why biometrics is a solution for security and authentication. Face, gait and ECG based biometrics will be covered. Biometrics and encryption will also be discussed, and the course will conclude with a discussion of future steps.

After completing you should be able to develop an understanding of:

* biometrics fundamentals and systems

* biometrics security and authentication

* face and gait recognition

***********************************************************************************

CEUs (Continuing Education Units) will be awarded to active attendees.

See http://www.ewh.ieee.org/r7/toronto/events/feb1510.htm for details.

***********************************************************************************

Title:     Biometrics: Solutions for Security and Authentication

Date: Monday, February 15, 2010

Time: 6:00 PM – 8:00 PM EST

After registering you will receive a confirmation email containing information about joining the Webinar.

  • Share/Bookmark

Webcasts

02.08.10

This week on your subscribed channels:

Webcast: 11 Feb 2010 4:00am Best Practices: Data Loss Prevention and Implementation
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6069

Webcast: 11 Feb 2010 6:00am Security is in the Eye of the Beholder
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6007

Webcast: 11 Feb 2010 8:00am Data Leakage – in the ‘Real World’
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6163

Webcast: 11 Feb 2010 9:00am Top 10 Myths about Data Loss Prevention (DLP)
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6719

Webcast: 11 Feb 2010 10:00am Data Loss Prevention – Considering a Strategy
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6026

Webcast: 11 Feb 2010 1:00pm A DLP Case Study at Marriott Vacation Club Intl
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6093

Webcast: 11 Feb 2010 3:00pm Prevention or Response; Law – Policy – Procedure
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6277

Webcast: 11 Feb 2010 4:00pm Building a Solid Foundation for DLP
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6094

Webcast: 11 Feb 2010 5:00pm Data Loss Prevention: 7 Steps to Success
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6505

Recently scheduled webcasts on your subscribed channels:

Webcast: 11 Feb 2010 9:00am Top 10 Myths about Data Loss Prevention (DLP)
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6719

Webcast: 11 Mar 2010 10:00am The Data Melting Pot – Computing in the Cloud
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6649

Webcast: 8 Apr 2010 10:00am Privacy, Data Protection and Security – Post UK Election
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6621

  • Share/Bookmark

Intrusion Prevention Summit – Free, Interactive Best Practice Webcasts

01.11.10

Join a great lineup of thought leaders & industry professionals at BrightTALK’s free, online Intrusion Prevention Summit on January 12th. The live, vendor-neutral, interactive webcasts will cover current trends in intrusion prevention systems, the total economic impact of network security intrusion prevention, and best practices and strategies to protect your database from the inside out: http://www.brighttalk.com/summit/intrusionprevention

WHEN: Tuesday, January 12, 2010, attend live online throughout the day or afterward on-demand

TOPICS AND PRESENTERS:
“IDS & IPS: What You Don’t Know Might Hurt You”
Stuart Wilson, CTO of Endace

“Weaponization of Enterprise Mobile Endpoints”
Winn Schwartau, Founder of SCIPP International

“Leverage Cyber Threat Intelligence to Identify Network Intrusions”
Peter Makohon, Principal at Deloitte & Touche LLP

“Malware Analysis in the Incident Response Process”
Tyler Hudak, Incident Handler at General Electric

“The In’s and Out’s of Intrusion Prevention”
Heather Axworthy, Lead Security Specialist at University of Massachusetts

“Building the Business Case for Application Security”
Calem Sima, CTO of ASC and Katherine Lam from HP

“Best Practices: Intrusion Prevention Systems”
Marco Ermini, Network Security Manager, Vodafone Group Services

“Defense in Depth: Protection from Attacks at Various Stages”
Matt Dieckman, SonicWALL

“Network Security Monitoring: Scalability Challenges”
Sirah Ahmed Shaikh, Senior Lecturer at Coventry University

“Intrusion Prevention Systems Overview”
Maria Papadaki, Lecturer in Network Security at University of Plymouth

“Preventing Intrusions by Insiders: A Game-Theoretic Approach”
Sokratis Katsikas, Ministry of Infrastructures, Transports & Networks

Review the schedule and register to attend any or all of the free summit webcasts at http://www.brighttalk.com/summit/intrusionprevention

You will be able to attend any or all of the webcasts, submit real-time questions to presenters, and vote in audience polls. If you are unable to attend the webcasts live, you can also view them afterward on-demand

  • Share/Bookmark

MA à Télé-Québec lundi

01.07.10

J’ai participé à un reportage sur la téléphonie IP. Celui-ci sera diffusé lundi prochain (11 janvier 2010) à 19h00 à l’antenne de Télé-Québec.

Si vous ratez la télédiffusion, l’émission complète sera disponible en ligne à l’adresse http://legitimedepense.telequebec.tv tout de suite après la première diffusion télé (lundi 19h30). Cette émission propose une approche qui intègre des comédiens et des spécialistes dans une approche pédagogique ludique.

Le reportage a pour objectif d’éduquer les néophites sur la téléphonie IP. Il s’agit donc de vulgarisation des technologies.
-
Marc-André Léger, DESS, MScA(MIS), PhD(candidate)
————————————————————-
Directeur, Fondation de Recherche Léger
Responsable du projet d’Université Populaire d’Hochelaga-Maisonneuve
Au Pavillon d’éducation communautaire d’Hochelaga-Maisonneuve
Chargé de cours, Faculté d’Administration de l’Université de Sherbrooke
Chargé de cours, Faculté de Médecine de l’Université de Sherbrooke
Professor, Champlain College

  • Share/Bookmark

How to Setup DD-WRT on a Linksys WRT54GL v1.1

11.30.09

By Walid ZGHIDI AND HAROUN BACHKHAZNADJI
November, 2009, Version 1.0 – LAB 1, Champlain College – St – Lambert
Students in the Wireless Networking (CWNA) – A.E.C, WLAN Design, Installation and Management

Step By Step Guide

Installation is quick and easy. You just have to follow the steps below. Remember that you’ll need a compatible router to install the new firmware (you can find a list of compatible models here).

Leave your router’s installation CD in the box, you won’t need it.

Be sure your computer obtains IP addresses automatically from your existing router via DHCP. Now you can proceed to STEP A.

STEP A – Replacing the original firmware to DD-WRT

In the first step, you’ll have to replace the firmware on your new router.

1. Download DD-WRT firmware  dd-wrt.v24_voip_generic.bin

http://www.dd-wrt.com/site/support/router-database and save it to your computer.

DDWRT website

2. Connect your PC to the switch port of your router. (Do not connect it to the internet wan port; you have to connect the internet to the wan port)

3. Open a browser and type http://192.168.1.1 (login: admin, password: admin)

4. Go to Administration > Firmware upgrade.

Linksys 1

5. Browse to dd-wrt.v24_nokaid_generic.bin that you previously saved to your computer, then press upgrade. UPGRADE MUST NOT BE INTERRUPTED so please don’t turn off the power or press the reset button.

firmware upgrade

After 3-4 minutes “Upgrade successful” will come up. Please wait for this message it is very important. Do not go further until you can see the message.

6. After the successful firmware upgrade please reset your router by pressing the reset button for at least 5 sec. on the back of your router (little button on the back of the router). Verify whether the router is doing a reset/reboot or not. If the POWER light on the front of the router is starting to flash, then everything is OK. If nothing happens, then unplug the router, then plug in again. Wait for the router to finish the boot process (the POWER light stops flashing), then press the reset button on the back for 5 seconds. The router should do a reset now.

7. Wait aprx. 30 sec and try to open http://192.168.1.1 if you cannot connect then reboot your computer then try again. If you still cannot connect then visit this page.

You should see the following screen:

Screen

You must have to set a new username / password for the router’s admin interface.

Now you have a new firmware in your router, now you need to load your hotspot settings.

For STEP B you will need to have an internet connection through the Linksys

To verify this, connect to the router and try to browse the internet. If it doesn’t work then go to your router’s admin page again (192.168.1.1, with the username/password you have changed at the end of the first step). If it won’t load unplug your network cable for 2 sec or try to reboot your router by unplugging the power cord.

Check the router’s time at the upper-right corner. It has to show the current time in GMT. If you see that the time is ‘00:00:00′ (and the current time is not midnight in GMT) it means that the router is not connected to the internet. If you’re not sure what time the router has to show, you can check the GMT time here.

IF YOUR LINKSYS DOESN’T GET CONNECTED TO THE INTERNET…

A. If your router is connected to an internal network via another router then maybe you need to modify the IP address (as seen on the internal LAN) of the router. By default it is set to 192.168.1.1 .If both router use the same IP then the communication won’t work. In this case go to Setup > BASIC Setup > IP Address and Subnet Mask > change the IP address to 192.168.20.1 (leave the rest unchanged). Important: you won’t be able to connect to the router until you reboot your computer because the router will have a different IP address.

B. If your router is connected directly to your ADSL modem instead of an internal network (another router) then you have to go to Setup > Basic Setup and choose PPPoE and you have to fill out your ADSL username and password. See next screenshot:

Screen 5

STEP B won’t work if your Linksys is not connected to the internet correctly, so do not go further until you see the current time in GMT.

If everything looks fine, then you can proceed…

1. Now you will have to run a special command on your router. This is unique for every operator and can be found in the Control Center.

Log in to the Control Center with your Operator Username and password (this is the username and password that you’ve choose at the registration). Go to Manage > Locations and choose the location where you’d like to install your Linksys. Then find the “ROUTER SETUP COMMAND” section at the bottom, click on the ‘Highlight Text’ button to select all the text in the text area, and then copy it to the clipboard. (Press CTRL+C or APPLE+C or select the copy command from the browser’s EDIT menu).

2. Go to your router’s admin page again at 192.168.1.1 or 192.168.20.1 if you’ve changed it previously.

Go to Administration > Commands. Copy your special command (that you’ve copied from the HotSpotSystem.com’s Control Center) from the clipboard to the text box (click on the text box and press CTRL+V or APPLE+V or select the paste command from the browser’s EDIT menu).

Press the ‘Run Commands’ button.

Run command

Important: you won’t be able to connect to the router until you reboot your computer because the router will have a different IP address (if you changed the IP previously you don’t have to reboot).

If everything was OK, then the ‘LinkSys’ led on the left of your router has to show yellow light. Connect to your Hotspot wirelessly with a laptop and see what’s happening. Your Hotspot start up page has to come up if you enter a web page in your browser. Also, you can check your e-mail address; the system is sending automatic e-mail to the e-mail address you have provided at the registration upon successful installation.

In case of successful upgrade the admin page of your router will be available at: http://192.168.20.1

IF YOU ARE NOT REDIRECTED TO THE START PAGE, BUT GET FREE INTERNET WHEN CONNECTED TO THE ROUTER WIRELESSLY…

Check that DHCP Interface is set to “WLAN” under Services > Hotspot page. If not, then set it to “WLAN” and press “Apply”. The router will now reboot. If you don’t have a “WLAN” option, then your router has different interface types. You have to find out what interface is the wireless interface. Try to set an interface, then connect to the router wirelessly. Do these until you find the right interface and you can connect to the router successfully via Wi-Fi.

You are done. Now you can operate your router as a AP and you can watch your transactions on your admin page.

Final screen

  • Share/Bookmark

Présentation d’essai de Maîtrise GASTI

11.12.09

Avis de présentation publique d’essai de Maîtrise en Administration, option Gouvernance, Audit et Sécurité des Technologies de l’information ( programme GASTI)

Samedi, le 14 novembre 2009
au local T1-130-6 du Campus de Longueuil
1111, rue St-Charles Ouest, Longueuil, QC

À 10h00: Monsieur Annassou Abokou, MSc, DESS,
Candidat au MADM option GASTI

Essai-intervention: Utilisation de la méthodologie d’analyse de risques CIGALE afin de réaliser un plan directeur en matière de sécurité de l’information dans un établissement du réseau de la santé du Québec.

Dirigé par Marc-André Léger, DESS, MScA,
Candidat au Doctorat en Sciences Cliniques,
Chargé de cours à la Faculté d’Administration

À 11h00: Monsieur Jean-François Allard,
Candidat au MADM option GASTI

Essai-intervention: La catégorisation des actifs informationnels dans une institution financière coopérative.

Dirigé par Marc-André Léger, DESS, MScA,
Candidat au Doctorat en Sciences Cliniques,
Chargé de cours à la Faculté d’Administration

  • Share/Bookmark

Résultats du War drive 2009

11.08.09

par Marc André Léger, DESS, MASc (mis), PhD (candidat)
Professeur, Collège Champlain (Saint Lambert)
Chargé de cours, Université de Sherbrooke – Longueuil

Read this post in English

Sommaire

Le samedi, 7 novembre 2009, de 9h00(AM) à midi, les étudiants du programme de réseaux sans fil du Collège Champlain (Saint-Lambert) sous la surveillance de leur professeur Marc-André Léger, ont exécuté un audit de sécurité de réseaux sans fil dans les rues de la Rive-Sud de Montréal, de la ville de Montréal et de quelques autres villes environnantes. Ce document présente une vue d’ensemble de ce qui a été fait et un sommaire des résultats.

Objectifs de l’audit

À l’origine, en 2007, cette activité éducative fut inspirée par des reportages sur les vulnérabilités des réseaux sans fil domestiques. Des activités semblables ont eu lieu dans la ville de Saint Lambert au printemps 2007 et dans la ville de Montréal en 2007, 2008 et au début de 2009 avec des cohortes d’étudiants du même programme. Comme lors des activités précédentes, l’objectif principal d’un point de vue éducatif était de fournir aux étudiants une expérience pratique d’exécution d’un audit sans-fil. L’objectif secondaire était de cartographier les réseaux sans fil (domestiques et d’affaires) qui se trouvent dans la zone couverte. Cela donne aux étudiants une idée de la situation des réseaux sans fil dans la région de Montréal à un moment déterminé.

Comme dans les activités précédentes, pour respecter le droit à la vie privée des résidants, les étudiants furent instruits seulement à seulement observer les données IEEE 802.11b, IEEE 802.11g et les signaux présents dans le domaine public, en dehors des limites de la propriété privée, n’enfreignant jamais ces limites. Les étudiants furent avisés de ne pas observer ou ne pas essayer d’analyser les données à l’intérieur des paquets ou d’essayer d’accéder aux données, à l’information ou aux réseaux informatiques de quelque façon. Aucune tentative d’accéder à des installations informatiques, à des dossiers ou à des ressources ne devait être entreprise par des étudiants, afin de respecter l’art. 342.1 du Code criminel du Canada. Tout étudiant qui ne respecterait pas ces règles serait exclu de l’activité et sujets à des sanctions académiques.

Logistique d’activité

Quatorze (14) étudiants du cours Principes fondamentaux des WLAN du Collège Champlain (Saint-Lambert) ont participé. Le Collège Champlain (Saint-Lambert) est un établissement scolaire public anglophone de la région de Montréal situé près de la station de métro Longueuil-Université de Sherbrooke. Les étudiants furent divisés en 7 équipes de 2 ou 3 étudiants. Chaque équipe ayant été assignée un secteur situé dans les villes et les arrondissements de Longueuil, Greenfield Park, Saint-Hubert, Brossard, Laprairie, Ahuntsic, Ville-Marie, Hochelaga-Maisonneuve, Rosemont, Saint-Laurent et Westmount. Les locaux de la Fondation de recherche Léger (Centre de recherche Hochelaga-Maisonneuve) servirent de centre opérationnel et comme lieu de rencontre pour le diner.

Le Collège Champlain (Saint-Lambert) a fourni un ordinateur portatif par équipe pour les étudiants qui n’en avaient pas à leur disposition et le professeur a fourni des GPS.

Les étudiants ayant reçu leurs équipements au cours du jeudi soir précédent, l’audit pu débuter vers 9h00. Chaque équipe d’étudiants s’est donné un lieu de rencontre à leur convenance, les secteurs attribués ayant été assignés en fonction de leur lieu de résidence. Ils se sont tous rejoints vers 13h00 pour un diner pizza suivi d’un compte rendu de l’activité.

War drive ou audit de sécurité de WLAN ?

Le War driving est une activité qui consiste à se promener avec un ordinateur portable ou un dispositif portatif (PDA, scanner), pour détecter des réseaux sans fil. Cette activité a débuté dans la région de San Francisco (Californie, États-Unis) par un groupe d’utilisateurs sans fil de la région de la baie de San Francisco (BAWUG). Le terme War driving provient de War dialing, qui a été popularisé dans le film Wargames (1983).

Le war driving est possible parce que les utilisateurs de réseaux sans fil, par manque de connaissances, manque de temps, par ignorance ou par paresse, configurent inadéquatement (ou pas du tout) leurs points d’accès sans fil. Dans beaucoup de cas, les dispositifs sont sans protection parce que la configuration par défaut qui était en place quand le dispositif a été acheté est employée. Par exemple, dans les données de l’exercice, 30,3% utilisent le canal 6, souvent celui réglé à l’usine.

Les résultats

Lors de l’exercice, un total de 42128 dispositifs furent trouvés, ce qui constitue l’échantillon utilisé pour cet article (n=42128).

Item

Automne 09

Hiver 09

Hiver 08

Automne 07

Hiver 07

n

%

n

%

n

%

n

%

n

%

Sample

42128

100

8780

100

8488

100

14906

100

330

100

Sans Encrypt

4774

11.3

1110

12.6

1925

22.7

3618

24.3

103

31.2

Avec Encrypt

37354

88.7

7670

87.4

6563

77.3

11288

75.7

227

68.8

Canal 1

7440

17.7

1528

17.4

941

11.1

1716

11.5

33

10.0

Canal 2

1995

4.7

236

2.7

101

1.2

180

1.2

8

2.4

Canal 3

1802

4.3

313

3.6

134

1.6

257

1.7

2

0.6

Canal 4

2077

4.9

369

4.2

323

3.8

369

2.5

3

0.9

Canal 5

1050

2.5

179

2.0

85

1.0

147

1.0

4

1.2

Canal 6

13184

30.3

3206

36.5

4353

51.3

7406

49.7

178

53.9

Canal 7

1071

2.5

193

2.2

84

1.0

172

1.2

4

1.2

Canal 8

1828

4.3

318

3.6

163

1.9

272

1.8

3

0.9

Canal 9

1458

3.5

323

3.7

183

2.2

295

2.0

5

1.5

Canal 10

995

2.4

205

2.3

176

2.1

332

2.2

5

1.5

Canal 11

9629

22.9

1918

21.8

1948

23.0

3852

25.8

85

25.8

Tableau 1 : sommaire des résultats

Il y a des similitudes entre les mesures de cet exercice et ceux des exercices précédents. Des 42128 dispositifs inclus dans l’échantillon, 11.3% sont non chiffrés. C’est légèrement mieux que le 12.6% identifié dans l’exercice précédent, mieux que le 22.71% de l’année précédente et bien mieux que le 31.2% de l’hiver 2007. Les résultats montrent une amélioration continue de la situation.

Comme dans l’exercice précédent, le problème potentiel de la proximité étroite des dispositifs sans fil utilisant les mêmes fréquences et les mêmes canaux (6 et 11) fut observé. Les utilisateurs de ces dispositifs doivent probablement avoir des problèmes de performance. Cependant, c’était en dehors de la portée du projet, les étudiants n’ayant pas les outils requis afin d’évaluer cette problématique particulière. D’autres canaux utilisés sont 36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161. Ces canaux sont probablement utilisés dans une tentative futile de mettre en place une illusion de sécurité.

Conclusion

De façon générale les étudiants ont semblé tout à fait satisfaits de l’expérience, comme par les années précédentes, leur permettant d’observer sur le terrain des concepts théoriques vus en classe. Il n’y eut aucun problème avec les résidants. En comparaison aux années précédentes les données sont encourageantes, car elles montrent une certaine amélioration de la situation et une réduction du risque associé à l’utilisation des réseaux sans fil. Cependant, les efforts continus de sensibilisation des utilisateurs à l’échelle provinciale à la sécurité de l’information doivent être maintenus pour maintenir ces bons résultats dans le temps et pour continuer à améliorer la situation. Comme nous l’avons dit à maintes reprises dans le passé, c’est par l’éducation que le changement durable peut émerger.

Bibliographie

Léger, Marc-André (2007, 2008 et 2009) présentations en classe, disponibles sur www.leger.ca

  • Share/Bookmark

Highlights of the Fall 2009 WLAN Audit in Montreal

11.07.09

by Marc André Léger, DESS, MASc (MIS), PhD (Candidate)
Professor, Champlain College (Saint Lambert)
Lecturer, University of Sherbrooke – Longueuil

Lire cet article en français

Summary

On Saturday, November 7th, 2009 from 9:00a.m. to 13:00, students from the Wireless Networking program at Champlain College Saint-Lambert under the supervision of their professor, Marc-André Léger, performed a wireless network security audit in the streets of Montreal, Quebec, Canada as an educational activity. This document presents an overview of what was done and a summary of the results.

Audit objectives

This was primarily intended as an educational activity inspired by media reports and documentaries on the vulnerabilities of home wireless networks. Similar activities had taken place in 2007, 2008 and in the spring of 2009 with previous cohorts of students from the same program. As before, the principal objective from an educational point of view was to provide the students with hands-on experience in performing a wireless network audit). The general objective was to perform a partial area Wireless LAN audit and map the wireless networks (either home or business) that where found. This would give the students an idea of the current situation of wireless networks in the Montreal region.

As in the previous exercises, to respect the right to privacy of residents, students where instructed to only observed IEEE 802.11x data packets and signals present outside the limits of private property, never trespassing. Students had been strictly advised that all activities where being performed on public propriety as a community service activity. No attempt to access computer facilities, files or resources was to be undertaken by students. This was also done to respect Art. 342.1 of the Criminal Code of Canada.

Activity logistics

Fourteen (14) students participated from the WLAN Fundamentals course. The students where divided in 7 teams of 2 or 3 students. Each team was assigned an area in various areas in the Montreal region. These where located in the cities and neighborhoods known as: Brossard, Laprairie, Saint-Laurent, Westmount, Lasalle and Montreal (Ahuntsic, Villeray, St-Michel, Plateau Mont-Royal and Hochelaga-Maisonneuve districts). These areas where convenient to students, based on their area of residence. Students who participated in the exercise where required to have a laptop per team, equipped with a wireless (802.11b, g or n) network adapter and open source software (netstumbler). Students who did not have this equipment had one supplied by the College. As well, the teacher provided GPS devices to students.

War driving or WLAN Security audit ?

War driving is the act of driving around an area searching using a laptop computer or a portable device (PDA, Scanner), to detect networks. The name War driving comes from war dialing, which has been popularized in the 1983 movie WarGames. As for the previous exercise, it was decided to call the exercise a WLAN Security Audit as War Drive has negative connotations.

War driving is possible because users of wireless networks, due to lack of knowledge, lack of adequate information, ignorance or laziness leave their wireless access points unsecured. In many cases the devices are unsecured because the default configuration that was in place when the device was purchased is still being used.

Findings

During the war drive a total of 42128 devices where found, this is a significant increase from the numbers that where identified in the past. We suggest that this increase may be caused by several factors:

  • An improvement in the manner in which the exercise is planned and executed;
  • An expansion of the coverage area from previous exercises;
  • An increase in the number of locations, both residential and business, which have implemented WLANs due to lower prices, greater availability and a reduction of perceived security risks.

For this article, all the devices where used to form the sample (n=42128).

Item

Fall 09

Winter 09

Winter 08

Fall 07

Winter 07

n

%

n

%

n

%

n

%

n

%

Sample

42128

100

8780

100

8488

100

14906

100

330

100

Encrypt. OFF

4774

11.3

1110

12.6

1925

22.7

3618

24.3

103

31.2

Encrypt. ON

37354

88.7

7670

87.4

6563

77.3

11288

75.7

227

68.8

Channel 1

7440

17.7

1528

17.4

941

11.1

1716

11.5

33

10.0

Channel 2

1995

4.7

236

2.7

101

1.2

180

1.2

8

2.4

Channel 3

1802

4.3

313

3.6

134

1.6

257

1.7

2

0.6

Channel 4

2077

4.9

369

4.2

323

3.8

369

2.5

3

0.9

Channel 5

1050

2.5

179

2.0

85

1.0

147

1.0

4

1.2

Channel 6

13184

30.3

3206

36.5

4353

51.3

7406

49.7

178

53.9

Channel 7

1071

2.5

193

2.2

84

1.0

172

1.2

4

1.2

Channel 8

1828

4.3

318

3.6

163

1.9

272

1.8

3

0.9

Channel 9

1458

3.5

323

3.7

183

2.2

295

2.0

5

1.5

Channel 10

995

2.4

205

2.3

176

2.1

332

2.2

5

1.5

Channel 11

9629

22.9

1918

21.8

1948

23.0

3852

25.8

85

25.8

Table 1: summary of results

Based on the data, there has been a lot improvement in the last year. Of the devices included in the 2009 sample, 11.3% where unencrypted. This is an improvement from the already good result of 12.6% in the spring and much better that the 22.7% from 2008, the 24% from the Fall 2007 exercise and the 31% from the Winter 2007 exercise.

As in all the previous exercises, the potential problem of the close proximity of multiple wireless devices using channel 6 was found. As before, the use of other channels, channel 1 and 11, has increased. These are distant enough (4 channels minimum) to avoid, or significantly reduce, interference. We also found that some AP’s where configured using channels 36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161.

Conclusion

Overall the students seemed quite pleased by the experience as per previous years, allowing them to visualize some of the theoretical concepts seen in class. Compared to previous years the data shows a lot of improvement in wireless network security. While the results from 2007 and 2008 where far from being an ideal situation, the current results indicate that the trend that had been identified in the past continues: users of wireless networks are taking security more seriously. In the past we suggested that this may perhaps be in part the result of IT security awareness campaigns that took place in Québec in the last year and of numerous news reports and documentaries on Information Security.

Bibliography

Léger, Marc-André (2008) Class presentation for the course WLAN Fundamentals, available on www.leger.ca

  • Share/Bookmark

Télchargez ma conférence FSQ2009..

10.06.09

Télchargez la conférence de Marc-André Léger présenté samedi prochain 8h30am au Forum Social Quebecois (PDF) http://www.upopulaire.ca/fichiers/FSQ2009-Upop.pdf/

  • Share/Bookmark

Podcamp Mtl: Le Podcast comme outil en éducation

09.14.09

Je vais participer à la conférence Podcamp – Montréal la fin de semaine prochaine. J’y donne une conférence intitulée: Le podcast comme outil en éducation. Lors de cette conférence, je parlerai de mes expériences avec les Podcast et vidéocast à l’Université de Sherbrooke depuis 2006 et à l’Université Populaire Hochelaga-Maisonneuve depuis 2008. Mes podcast vidéo (videocast), disponible sur Google Video, youTube ou ailleurs ont été visionnés des milliers de fois sur internet. Sur mon site de WebTV ( http://www.livestream.com/LegerTV ), il y a eu plus de 5000 heures de visionnement. Certains de mes podcast sont accessibles seulement aux étudiants inscrits, j’expliquerai pourquoi… et tenterai de comprendre, avec vous, pourquoi j’ai reçu des menaces de mise en demeure d’une Faculté universitaire réfractaire au changement.

J’expliquerai aux enseignants comment combiner l’enseignement magistral, le podcast, Twitter, FaceBook, les WiKi, LMS et les nouveaux médias en général pour créer une expérience d’apprentissage adaptée aux étudiants 2.0 qui plairait à Piaget, Skinner et McLuhan. Je parlerai aussi de mes expériences en éducation populaire et avec les aînés. Je parlerai des outils, des coûts et du processus.

Vous pouvez obtenir une copie PDF de ma présentation.

Un vidéo de ma présntation: http://www.crhoma.org/video/Podcamp2009/mal-podcamp2009.wmv

This conference is in french, but I will answer questions in both english and french.

  • Share/Bookmark

WLAN webinar

08.27.09

Join us Wed. Sept. 16 for an educational web seminar  to discuss how the impending ratification of the 802.11n  standard affects enterprise IT.
802.11n represents a dramatic performance increase for wireless LANs. Many enterprise IT organizations are already reaping significant benefits using draft 2.0-802.11n devices to enhance and reduce network edge costs. With the long-anticipated ratification of the 802.11n standard, enterprise IT departments will face a new set of opportunities and challenges – from cost savings to security vulnerabilities.

During this highly educational web seminar, the presenters will share results from their extensive technology research and industry efforts. They will share specific recommendations on how to incorporate this major technology advancement in your IT strategy, regardless of the extent wireless LAN technology is part of your current plans.

Topics covered will include:

  • Detailed status of the IEEE 802.11n standard ratification
  • 802.11n interoperability certification and technology availability
  • Avoiding potential pitfalls when deploying 802.11n, and the potential risks of explicitly not deploying 802.11n
  • How IT departments can apply 802.11n technology to significantly reduce networking costs
  • Strategies to address potential wireless LAN security threats that will inevitably follow the 802.11n ratification

Click here to register!

  • Share/Bookmark

New tech-essentials Webcasts

08.18.09

Top 5 Insider Attack Tactics: How Access Control Can Help

Money, politics, or revenge motivates the insider who commits fraud, compromises sensitive data, or sabotages a network. While “insider threat” causes such losses, it’s insider risk — potential financial damage through lost revenue, or damage to brand equity, reputation, intellectual property, or even human life — that organizations manage through access control. This white paper explores insider attacks and insider risk, and shows how to control them by controlling and monitoring access. The paper also describes the more common vulnerabilities exploited by insider attacks and a method for assessing insider risk.

Download Now
DOWNLOAD NOW
How to Stay on Course in a Tough Economy with SOA

Uncertainty about the economy is causing many IT executives to reevaluate current and new initiatives. This white paper defines the challenges facing IT executives, and outlines actions they can take now to cut costs, increase productivity and get more out of existing IT investments.

Download Now
DOWNLOAD NOW
4 Tips for Improving Decision Management

Decision Management answers four imperatives for businesses seeking to thrive in today’s difficult environment. This white paper shares FICO’s decades of experience helping enterprises compete more effectively using decision management technology.

Download Now
DOWNLOAD NOW
Data Warehousing Solutions: What to Know Before You Buy

Discover the unique support for data warehousing and business intelligence offered by the IBM DB2 portfolio. This white paper shows how an IBM System z server, integrated with the IBM DB2 family of solutions, can help you meet requirements for data warehousing and business intelligence.

Download Now
DOWNLOAD NOW
How to Prevent Unauthorized Code: 6 Solutions Compared

Preventing the installation and execution of unauthorized software should be a high priority for any IT-conscious organization. Allowing users to install or execute unauthorized software can expose an organization to a variety of stability, security, and legal risks, not to mention the burden of support costs. This paper will compare and contrast a variety of techniques for detecting and preventing unauthorized code.

Download Now
DOWNLOAD NOW
Stop Paying More for Less: 7 Reasons to Switch to BladeCenter S

Stop paying more for less space and fewer features in your blade solution. Instead, choose a solution designed specifically for distributed enterprises. Read how IBM BladeCenter S provides greater capabilities — including 9TB of flexible storage, low noise, a specialized rack with air filtration and available layer 2-7 secure switching — at a lower price than HP Blade System c3000.

Download Now
DOWNLOAD NOW
  • Share/Bookmark

100 Tips, Tools, and Resources…

08.15.09

100 Tips, Tools, and Resources for Teaching Students About Social Media http://su.pr/1f9LqR

Tips and Resources for Educators

From tips on combating fear of social media to tools and articles to help guide you, these resources will get you off to a good start.

  1. Social Media Classroom. This free, open-source resource allows teachers to teach social media through using it. This is a great tool for those teaching social media.
  2. Teaching with Social Media. Elizabeth Losh, a writing director at UC Berkeley, has put together this page of notes about teaching social media that includes statistics, examples, and principles.
  3. Teaching Social Media. This blog is about teaching social media to marketing students, but offers great information on the world of social media that all teachers may find helpful.
  4. Teaching Social Media by addressing Fear. This article outlines several common fears those unfamiliar with social media encounter and ways to combat this fear.
  5. Opencast Project Open House at UC Berkeley. This 1 hour video presentation discusses using audio and visual media as a tool for learning.
  6. Introduction to Copyright Law. Study with this open courseware class from MIT to learn the basics of copyright law–with a heavy emphasis on Internet-related topics.
  7. Copyright for Educators. Specifically for teachers, this blog post includes an hour-long presentation on copyright issues.
  8. A Fair(y) Use Tale. This video introduces copyright and fair use policy.
  9. Moodle. Moodle is a free, popular tool among educators who want to create a space for their class to have access to forums, wikis, databases, and much more.
  10. Learning and Working in the Collaborative Age: A New Model for the Workplace. Watch this video to learn what Pixar University’s Randy Nelson believes schools must do to better prepare students for careers in new media.

Networking

Help students learn about networking with these tips and resources.

  1. Networking. This list of links will help students learn what they should and shouldn’t do when networking online.
  2. ‘Online Social Networking on Campus’. This article offers a Q and A that describes how online social networking is used by students and what direction it is likely to take in the future.
  3. Students Turn to Social Networking Sites for Info. This article offers a real-life example of the value of social networking as a news vehicle.
  4. How Social Networking Affects the Student Life Cycle — From Applicant to Graduate. Read what these professionals from US colleges have to say about social networking and college students.
  5. Networking Timetable for College Students. Students can use this outline to prepare for a successful networking experience.
  6. Participate. For social networking to be effective, you have to participate. Be sure you set up a profile and join in the community.
  7. Get to know each other. Social networking provides a unique way of getting to know people in a deeper way through ambient awareness.
  8. Stay in contact. Social networking allows students to make contacts and friends early in their lives that they can maintain into adulthood. These contacts may become important when it comes to establishing a career.
  9. Get to know your instructors. Establishing professional working relationships with instructors not only provides students with a better educational experiences, but also establishes references after graduation.
  10. Network through discussion groups. Joining discussion groups revolving around topics being studied in school or particular career aspirations is an excellent way to practice social and professional networking skills.

Creating a Positive Web Presence

Students should learn from the very beginning that everything they do online says something about them–and will always be a part of their web presence. Help guide them with these resources.

  1. Keep Your E-Image Clean. Students can learn why it is important to keep their Internet image clean and how to do so here.
  2. Personal Branding 101: How to Discover and Create Your Brand. Help students discover how to establish a personal web presence with this article.
  3. Your On-Line Life is Your Reputation: Dos, Don’ts and Tips. Have students follow these tips for managing their online reputation.
  4. Managing Your Online Reputation: A College Student’s Perspective. Here’s the perspective of a college student discussing online reputation.
  5. Protecting Your Online Reputation. This article offers common-sense tips and reminders about online reputation.
  6. Not Just Your Space – the FREE ebook by Naymz. Written to help college students learn how to keep their online image looking great, this book is free to download.
  7. What You Say Online Could Haunt You. This article chronicles several real-life situations where students suffered the consequences of what they posted on social networking sites.
  8. Brand-Yourself.com. This site offers help establishing websites, online resumes, and more and is run for college students by college students.
  9. Student Brand Makeover. Show students this video to learn how to present yourself in the most favorable light when finding a job, internship, or other similar situation.
  10. Reputation Defender Blog. Follow this blog for advice on keeping online reputations clean as well as keeping up with social networking trends.
  11. How to Manage Your Reputation Online. This article offers ways to promote your reputation online while also monitoring anything new that shows up about you online.

Blogging

Learn how to set up a classroom blog, safety rules for students, laws everyone should be aware of, and more.

  1. Blogging in the Classroom. Watch this video to learn about the benefits of blogging and learn how to set up a classroom blog.
  2. Managing Comments and Posts On Student Blogs Using Google Reader. Learn an easy way to keep up with student posts as well as a helpful tutorial on how to set it up with Google Reader.
  3. Reflections on Student Blogging. With a focus on student in middle and high school, these tips and suggestions are from a teacher who has already been teaching student blogging.
  4. Responsible blogging. Based on a collaborative effort between a teacher and his 10th grade students, this is a list of rules they developed for safe blogging and are sharing with others.
  5. Online Media Law: The Basics for Bloggers and Other Online Publishers. This free class teaches bloggers and other online writers about defamation, privacy, and copyright as it pertains to online publishing.
  6. Blog Basics. Just as the title says, this article goes over the basics of what a blog is and also discusses how blogging can be used in the classroom.
  7. Blogs as Class Content. Get ideas on ways to incorporate blogs in your classes here.

Social Networking Sites

While some of these popular social networking sites are for students only, others are for anyone.

  1. Student.com. Students can connect with each other as well as get information about colleges and financial aid, find top online schools, and more.
  2. learnhub. This social networking site helps students find assistance with their class assignments.
  3. Campusbug. Connected with other students while also getting access to tools and resources for studying, homework, and projects.
  4. The Quad. Students can collaborate on school projects or organize face-to-face social events on this social network.
  5. RateMyProfessors.com. In addition to a social community, this site offers student-submitted information about professors by school or by professor’s name.
  6. IdeaWhip. Undergrads, grad students, and recent alumni entrepreneurs can connect through this social network.
  7. MySpace. One of the largest social networking sites, MySpace offers video and music sharing as well as socializing online.
  8. Ning. Create your own social network or search for existing social networks here.
  9. Facebook. One of the most popular social networking sites, Facebook was originally meant only for college students, but is now open to anyone.
  10. Loomagoo. Besides just connecting with others, students can purchase and sell text books, share notes, study guides, and more.
  11. Fast Pitch. This social network gives you a chance to network with professionals in preparation for your career after graduation.

Twitter

One of the hottest social media trends right now, Twitter is a great way for student to connect with each other, keep updated on the news, and more. These tips and tools will help them know how.

  1. Twhirl. This desktop client helps manage Twitter through such helpful features as URL shortening, new message notifications, image posting, and much more.
  2. TwitPic. This popular tool lets you share photos on Twitter.
  3. bit.ly. Shorten URLs so that you use fewer characters when sharing web links on Twitter.
  4. QuoteURL. This tool puts different Tweets together on one page and is a great tool for summarizing a project done with Twitter.
  5. Tweetree. Put Tweets in context with this tool that groups entire conversations together.
  6. TweetDeck. This tool allows you to create groups of Tweets to help manage the information you receive through Twitter.
  7. Get to know classmates. A class Twitter group will help facilitate teachers and students getting to know each other.
  8. Collaborate on projects. Use a tool like Tweetworks to set up a group so students can work together on projects.
  9. Brainstorm. Brainstorm on assignments and class projects on Twitter where students can share ideas any time outside of class.
  10. Direct Tweet. Instructors and students can contact each other throughdirect Tweets without having to share cell phone numbers.
  11. Follow news stories. Students can follow news that relates to what they are studying with one of the many news feeds available on Twitter.
  12. Make announcements. Teachers can send out reminders about upcoming tests, project due dates, or any other news via Twitter.
  13. Take a poll. Take student polls on Twitter with tools such as PollDaddy.
  14. Share interesting websites. Both professors and students can post interesting websites that are relevant to their subject matter.

Getting Ready for College

From helping students prepare for online education to social networks that lend money for education, these resources offer help to students getting ready to head off to college.

  1. eLearners Advisor. This tool will help students determine if an online education is the right path to follow for their personality and situation.
  2. Six Tips for Students’ Online Success. Students can find advice for adjusting to an online learning environment after leaving a traditional classroom setting.
  3. How Students Develop Online Learning Skills. This resource offers information about how online students can enhance their learning experience.
  4. GreenNote. This social lending site is a popular alternative to student loans and connects members willing to finance loans to students at low interest rates.
  5. Lending Club. Another social lending site, this one allows borrowers to get low rates and lenders to fund borrowers they choose.
  6. Zopa. This social finance network connects members who are seeking loans with credit unions that offer low-interest rates.
  7. CommunityLend. Members can learn about each other, hear their stories, and discover their financial experience through their social connections here, then borrow and lend money.
  8. 23 Warning Signs of Scholarship Scams. Help students learn if they are applying for legitimate scholarships with the help of this article.
  9. How to Get off the College Wait List. This article offers suggestions to help students get off the wait list and get accepted into the college of their choice.
  10. Rejection tweeting. See how some students react to their college application rejections through their Tweets.

Job Hunting

Job hunting through social media is the new way to find employment. Help prepare your students by teaching them how to utilize their social media skills to find a job.

  1. A Student’s Guide to Job Hunting on the Internet. This tutorial provides sound information on how to find a job via the Internet.
  2. Using Your Blog as a Job Search Tool. Teach students how to use their blog to get noticed and find a job.
  3. HOW TO: Build the Ultimate Social Media Resume. Students can use this tool to help build a powerful online resume.
  4. Alumwire. College students and recent grads can use the free services at this site to find a job.
  5. Glassdoor.com. Investigate companies, salaries, and more at this site when researching where you want to work. Students receive a free one-year membership.
  6. JobWeb. New grads can get help finding a job, opportunities to research employers, and informative articles at this site.
  7. CollegeRecruiter.com. Students and recent grads can find internship opportunities as well as jobs with this resource.
  8. MyWorkster. This site, specifically for students and new grads, links college networks with employers and also offers job listings.
  9. LinkedIn. This social networking site is an excellent place to create an online presence for students seeking to start their professional career.
  10. Ecademy. Another social networking site, this is a good place for students to network and make new connections with business professionals.
  11. Plaxo. Connect several social networking sites together through Plaxo.
  12. HOW TO: Find a Job on Twitter. Learn how students can find a job on Twitter, including several feeds they can follow.
  13. twitterjobcast. Search for jobs posted on Twitter with this tool.
  14. TweetMyJobs. This tool allows job seekers and employers to find each other through Twitter.
  15. Follow @jobhunting. This Twitter feed offers tons of information for those hunting for jobs.
  16. 50 People on Twitter Job Seekers Should Follow. Learn what Twitter feeds to follow if you are looking for a job, and read the follow-up post for even more.

Open Courseware Classes

These open courseware classes offer opportunities for both the teacher and students to learn about social media. Whether you want to take these free classes yourself or incorporate them into your lessons, they are a valuable resource.

  1. Blogs, Wikis, New Media for Learning. Utah State University offers this class about web 2.0 technology and covers such topics as blogs, RSS feeds, wikis, bookmarking tools, and podcasts.
  2. Introduction to Media Studies. Get to know the basics about new media in this class from MIT which covers topics including blogging, intellectual property, and game modification.
  3. New Media Literacies. Explore online social networking, videogames, collective intelligence, and other related subjects of media literacy in this class from MIT.
  4. Learn and Apply HTML. Learn the basics of HTML and how to use it with this class.
  5. Interactive Multimedia Production. Build a project learning to use Flash 9 with Utah State University’s online class.
  6. Technologies for Creative Learning. Using the Lego Programmable Brick and Computer Clubhouse, student explore ways new technologies can help stimulate learning and creativity.
  7. Five Steps to Multimedia Storytelling. Learn about audio, video, and graphics with a focus on Internet content in this class at the News University.
  8. Writing and Experience: Culture Shock! Writing, Editing, and Publishing in Cyberspace. Practice writing for an online audience through an exploration of American pop culture in this class from MIT.
  9. Communication Skills for Academics. This class teaches how to craft well-written academic papers and other academic communications.
  10. Understanding Online Interaction. Examine the ways people communicate online and learn how to design environments on the web that are conducive to learning.
  11. Becoming Digital: Writing About Media Change. This class explores the shift to digital media, especially looking at the shift in such areas as business, communication, and entertainment.
  • Share/Bookmark

An IEEE Continuing education ressource

08.07.09

Expert Now IEEE is a new, innovative product line which features the best of IEEE’s educational content delivered in one-hour long online learning modules. It contains the latest information on emerging technologies and seminal works presented at the best of IEEE’s conference tutorials, short courses and workshops and is available 24×7 worldwide with the benefit of eliminating time away from work and travel costs.

Find out more about IEEE Expert Now, visit: http://www.ieee.org/portal/pages/education/Expert_Now_IEEE/index.html

  • Share/Bookmark

SCHOOLS IN BRUNEI ENTER THE CLOUD

07.15.09

Students and teachers in Brunei will be given cloud-based email accounts by the end of this month, opening up opportunities for collaborative learning in the future.

“Students from year four onwards, teachers and school leaders will be given the official school email account hosted for free,” said Hj Mohd Yussof Hj Metassim, Acting Director of Brunei Ministry of Education (MoE)’s Information and Communication Department.

The MoE has started training users of the new email programme.

Setting up email accounts is part of the Microsoft Live@Edu Programme, which has collaborative tools for students and teachers to participate in online tutorials and discussions, collaborate on assignments, share calendars and workspaces.

MoE will also create an online Teachers’ Assessment Questionnaire to measure all teachers’ information technology (IT) skills and how well they use ITfor teaching.

The results will help MoE match training courses to the needs of individual teachers, added Metassim.

Source: http://www.futuregov.net/articles/2009/jul/13/schools-brunei-enter-cloud/

By Kelly Ng | 13 July 2009

  • Share/Bookmark