Cisco WLAN bridge
03.08.10
Education et recherche dans l'écosystème informationnel
03.08.10
02.22.10
For my Champlain College Wireless students in the WLAN fundamentals class starting today
02.13.10
The celebrated author of Against the Gods: The Remarkable Story of Risk explores the history of risk and how it works in real-world markets and in our lives.
Risk doesn’t mean danger—it just means not knowing what the future holds. That insight resides at the core of risk management for companies, whether in managing the potential downside of an investment or putting a value on the option of waiting when making irreversible decisions. In this video Peter L. Bernstein also explains why in the real world the most sophisticated mathematical models can sometimes fail.
02.11.10
FYI: Webinar on February 15 Space is limited.
Reserve your Webinar seat now at: https://www2.gotomeeting.com/register/702895155
This webinar will provide an overview of the study of methods for uniquely recognizing humans based upon one or more intrinsic physical or behavioral traits. I will present the fundamentals of biometrics and biometric systems. The course will delve into why biometrics is a solution for security and authentication. Face, gait and ECG based biometrics will be covered. Biometrics and encryption will also be discussed, and the course will conclude with a discussion of future steps.
After completing you should be able to develop an understanding of:
* biometrics fundamentals and systems
* biometrics security and authentication
* face and gait recognition
***********************************************************************************
CEUs (Continuing Education Units) will be awarded to active attendees.
See http://www.ewh.ieee.org/r7/toronto/events/feb1510.htm for details.
***********************************************************************************
Title: Biometrics: Solutions for Security and Authentication
Date: Monday, February 15, 2010
Time: 6:00 PM – 8:00 PM EST
After registering you will receive a confirmation email containing information about joining the Webinar.
02.08.10
This week on your subscribed channels:
Webcast: 11 Feb 2010 4:00am Best Practices: Data Loss Prevention and Implementation
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6069
Webcast: 11 Feb 2010 6:00am Security is in the Eye of the Beholder
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6007
Webcast: 11 Feb 2010 8:00am Data Leakage – in the ‘Real World’
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6163
Webcast: 11 Feb 2010 9:00am Top 10 Myths about Data Loss Prevention (DLP)
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6719
Webcast: 11 Feb 2010 10:00am Data Loss Prevention – Considering a Strategy
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6026
Webcast: 11 Feb 2010 1:00pm A DLP Case Study at Marriott Vacation Club Intl
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6093
Webcast: 11 Feb 2010 3:00pm Prevention or Response; Law – Policy – Procedure
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6277
Webcast: 11 Feb 2010 4:00pm Building a Solid Foundation for DLP
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6094
Webcast: 11 Feb 2010 5:00pm Data Loss Prevention: 7 Steps to Success
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6505
Recently scheduled webcasts on your subscribed channels:
Webcast: 11 Feb 2010 9:00am Top 10 Myths about Data Loss Prevention (DLP)
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6719
Webcast: 11 Mar 2010 10:00am The Data Melting Pot – Computing in the Cloud
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6649
Webcast: 8 Apr 2010 10:00am Privacy, Data Protection and Security – Post UK Election
Channel: Information Security
Attend : http://www.brighttalk.com/dcemail_redirect/webcast/6621
01.11.10
Join a great lineup of thought leaders & industry professionals at BrightTALK’s free, online Intrusion Prevention Summit on January 12th. The live, vendor-neutral, interactive webcasts will cover current trends in intrusion prevention systems, the total economic impact of network security intrusion prevention, and best practices and strategies to protect your database from the inside out: http://www.brighttalk.com/summit/intrusionprevention
WHEN: Tuesday, January 12, 2010, attend live online throughout the day or afterward on-demand
TOPICS AND PRESENTERS:
“IDS & IPS: What You Don’t Know Might Hurt You”
Stuart Wilson, CTO of Endace
“Weaponization of Enterprise Mobile Endpoints”
Winn Schwartau, Founder of SCIPP International
“Leverage Cyber Threat Intelligence to Identify Network Intrusions”
Peter Makohon, Principal at Deloitte & Touche LLP
“Malware Analysis in the Incident Response Process”
Tyler Hudak, Incident Handler at General Electric
“The In’s and Out’s of Intrusion Prevention”
Heather Axworthy, Lead Security Specialist at University of Massachusetts
“Building the Business Case for Application Security”
Calem Sima, CTO of ASC and Katherine Lam from HP
“Best Practices: Intrusion Prevention Systems”
Marco Ermini, Network Security Manager, Vodafone Group Services
“Defense in Depth: Protection from Attacks at Various Stages”
Matt Dieckman, SonicWALL
“Network Security Monitoring: Scalability Challenges”
Sirah Ahmed Shaikh, Senior Lecturer at Coventry University
“Intrusion Prevention Systems Overview”
Maria Papadaki, Lecturer in Network Security at University of Plymouth
“Preventing Intrusions by Insiders: A Game-Theoretic Approach”
Sokratis Katsikas, Ministry of Infrastructures, Transports & Networks
Review the schedule and register to attend any or all of the free summit webcasts at http://www.brighttalk.com/summit/intrusionprevention
You will be able to attend any or all of the webcasts, submit real-time questions to presenters, and vote in audience polls. If you are unable to attend the webcasts live, you can also view them afterward on-demand
01.07.10
J’ai participé à un reportage sur la téléphonie IP. Celui-ci sera diffusé lundi prochain (11 janvier 2010) à 19h00 à l’antenne de Télé-Québec.
Si vous ratez la télédiffusion, l’émission complète sera disponible en ligne à l’adresse http://legitimedepense.telequebec.tv tout de suite après la première diffusion télé (lundi 19h30). Cette émission propose une approche qui intègre des comédiens et des spécialistes dans une approche pédagogique ludique.
Le reportage a pour objectif d’éduquer les néophites sur la téléphonie IP. Il s’agit donc de vulgarisation des technologies.
-
Marc-André Léger, DESS, MScA(MIS), PhD(candidate)
————————————————————-
Directeur, Fondation de Recherche Léger
Responsable du projet d’Université Populaire d’Hochelaga-Maisonneuve
Au Pavillon d’éducation communautaire d’Hochelaga-Maisonneuve
Chargé de cours, Faculté d’Administration de l’Université de Sherbrooke
Chargé de cours, Faculté de Médecine de l’Université de Sherbrooke
Professor, Champlain College
11.30.09
By Walid ZGHIDI AND HAROUN BACHKHAZNADJI
November, 2009, Version 1.0 – LAB 1, Champlain College – St – Lambert
Students in the Wireless Networking (CWNA) – A.E.C, WLAN Design, Installation and Management
Step By Step Guide
Installation is quick and easy. You just have to follow the steps below. Remember that you’ll need a compatible router to install the new firmware (you can find a list of compatible models here).
Leave your router’s installation CD in the box, you won’t need it.
Be sure your computer obtains IP addresses automatically from your existing router via DHCP. Now you can proceed to STEP A.
STEP A – Replacing the original firmware to DD-WRT
In the first step, you’ll have to replace the firmware on your new router.
1. Download DD-WRT firmware dd-wrt.v24_voip_generic.bin
http://www.dd-wrt.com/site/support/router-database and save it to your computer.
2. Connect your PC to the switch port of your router. (Do not connect it to the internet wan port; you have to connect the internet to the wan port)
3. Open a browser and type http://192.168.1.1 (login: admin, password: admin)
4. Go to Administration > Firmware upgrade.
5. Browse to dd-wrt.v24_nokaid_generic.bin that you previously saved to your computer, then press upgrade. UPGRADE MUST NOT BE INTERRUPTED so please don’t turn off the power or press the reset button.
After 3-4 minutes “Upgrade successful” will come up. Please wait for this message it is very important. Do not go further until you can see the message.
6. After the successful firmware upgrade please reset your router by pressing the reset button for at least 5 sec. on the back of your router (little button on the back of the router). Verify whether the router is doing a reset/reboot or not. If the POWER light on the front of the router is starting to flash, then everything is OK. If nothing happens, then unplug the router, then plug in again. Wait for the router to finish the boot process (the POWER light stops flashing), then press the reset button on the back for 5 seconds. The router should do a reset now.
7. Wait aprx. 30 sec and try to open http://192.168.1.1 if you cannot connect then reboot your computer then try again. If you still cannot connect then visit this page.
You should see the following screen:
You must have to set a new username / password for the router’s admin interface.
Now you have a new firmware in your router, now you need to load your hotspot settings.
For STEP B you will need to have an internet connection through the Linksys
To verify this, connect to the router and try to browse the internet. If it doesn’t work then go to your router’s admin page again (192.168.1.1, with the username/password you have changed at the end of the first step). If it won’t load unplug your network cable for 2 sec or try to reboot your router by unplugging the power cord.
Check the router’s time at the upper-right corner. It has to show the current time in GMT. If you see that the time is ‘00:00:00′ (and the current time is not midnight in GMT) it means that the router is not connected to the internet. If you’re not sure what time the router has to show, you can check the GMT time here.
IF YOUR LINKSYS DOESN’T GET CONNECTED TO THE INTERNET…
A. If your router is connected to an internal network via another router then maybe you need to modify the IP address (as seen on the internal LAN) of the router. By default it is set to 192.168.1.1 .If both router use the same IP then the communication won’t work. In this case go to Setup > BASIC Setup > IP Address and Subnet Mask > change the IP address to 192.168.20.1 (leave the rest unchanged). Important: you won’t be able to connect to the router until you reboot your computer because the router will have a different IP address.
B. If your router is connected directly to your ADSL modem instead of an internal network (another router) then you have to go to Setup > Basic Setup and choose PPPoE and you have to fill out your ADSL username and password. See next screenshot:
STEP B won’t work if your Linksys is not connected to the internet correctly, so do not go further until you see the current time in GMT.
If everything looks fine, then you can proceed…
1. Now you will have to run a special command on your router. This is unique for every operator and can be found in the Control Center.
Log in to the Control Center with your Operator Username and password (this is the username and password that you’ve choose at the registration). Go to Manage > Locations and choose the location where you’d like to install your Linksys. Then find the “ROUTER SETUP COMMAND” section at the bottom, click on the ‘Highlight Text’ button to select all the text in the text area, and then copy it to the clipboard. (Press CTRL+C or APPLE+C or select the copy command from the browser’s EDIT menu).
2. Go to your router’s admin page again at 192.168.1.1 or 192.168.20.1 if you’ve changed it previously.
Go to Administration > Commands. Copy your special command (that you’ve copied from the HotSpotSystem.com’s Control Center) from the clipboard to the text box (click on the text box and press CTRL+V or APPLE+V or select the paste command from the browser’s EDIT menu).
Press the ‘Run Commands’ button.
Important: you won’t be able to connect to the router until you reboot your computer because the router will have a different IP address (if you changed the IP previously you don’t have to reboot).
If everything was OK, then the ‘LinkSys’ led on the left of your router has to show yellow light. Connect to your Hotspot wirelessly with a laptop and see what’s happening. Your Hotspot start up page has to come up if you enter a web page in your browser. Also, you can check your e-mail address; the system is sending automatic e-mail to the e-mail address you have provided at the registration upon successful installation.
In case of successful upgrade the admin page of your router will be available at: http://192.168.20.1
IF YOU ARE NOT REDIRECTED TO THE START PAGE, BUT GET FREE INTERNET WHEN CONNECTED TO THE ROUTER WIRELESSLY…
Check that DHCP Interface is set to “WLAN” under Services > Hotspot page. If not, then set it to “WLAN” and press “Apply”. The router will now reboot. If you don’t have a “WLAN” option, then your router has different interface types. You have to find out what interface is the wireless interface. Try to set an interface, then connect to the router wirelessly. Do these until you find the right interface and you can connect to the router successfully via Wi-Fi.
You are done. Now you can operate your router as a AP and you can watch your transactions on your admin page.
11.12.09
Avis de présentation publique d’essai de Maîtrise en Administration, option Gouvernance, Audit et Sécurité des Technologies de l’information ( programme GASTI)
Samedi, le 14 novembre 2009
au local T1-130-6 du Campus de Longueuil
1111, rue St-Charles Ouest, Longueuil, QC
À 10h00: Monsieur Annassou Abokou, MSc, DESS,
Candidat au MADM option GASTI
Essai-intervention: Utilisation de la méthodologie d’analyse de risques CIGALE afin de réaliser un plan directeur en matière de sécurité de l’information dans un établissement du réseau de la santé du Québec.
Dirigé par Marc-André Léger, DESS, MScA,
Candidat au Doctorat en Sciences Cliniques,
Chargé de cours à la Faculté d’Administration
À 11h00: Monsieur Jean-François Allard,
Candidat au MADM option GASTI
Essai-intervention: La catégorisation des actifs informationnels dans une institution financière coopérative.
Dirigé par Marc-André Léger, DESS, MScA,
Candidat au Doctorat en Sciences Cliniques,
Chargé de cours à la Faculté d’Administration
11.08.09
Sommaire
Le samedi, 7 novembre 2009, de 9h00(AM) à midi, les étudiants du programme de réseaux sans fil du Collège Champlain (Saint-Lambert) sous la surveillance de leur professeur Marc-André Léger, ont exécuté un audit de sécurité de réseaux sans fil dans les rues de la Rive-Sud de Montréal, de la ville de Montréal et de quelques autres villes environnantes. Ce document présente une vue d’ensemble de ce qui a été fait et un sommaire des résultats.
Objectifs de l’audit
À l’origine, en 2007, cette activité éducative fut inspirée par des reportages sur les vulnérabilités des réseaux sans fil domestiques. Des activités semblables ont eu lieu dans la ville de Saint Lambert au printemps 2007 et dans la ville de Montréal en 2007, 2008 et au début de 2009 avec des cohortes d’étudiants du même programme. Comme lors des activités précédentes, l’objectif principal d’un point de vue éducatif était de fournir aux étudiants une expérience pratique d’exécution d’un audit sans-fil. L’objectif secondaire était de cartographier les réseaux sans fil (domestiques et d’affaires) qui se trouvent dans la zone couverte. Cela donne aux étudiants une idée de la situation des réseaux sans fil dans la région de Montréal à un moment déterminé.
Comme dans les activités précédentes, pour respecter le droit à la vie privée des résidants, les étudiants furent instruits seulement à seulement observer les données IEEE 802.11b, IEEE 802.11g et les signaux présents dans le domaine public, en dehors des limites de la propriété privée, n’enfreignant jamais ces limites. Les étudiants furent avisés de ne pas observer ou ne pas essayer d’analyser les données à l’intérieur des paquets ou d’essayer d’accéder aux données, à l’information ou aux réseaux informatiques de quelque façon. Aucune tentative d’accéder à des installations informatiques, à des dossiers ou à des ressources ne devait être entreprise par des étudiants, afin de respecter l’art. 342.1 du Code criminel du Canada. Tout étudiant qui ne respecterait pas ces règles serait exclu de l’activité et sujets à des sanctions académiques.
Logistique d’activité
Quatorze (14) étudiants du cours Principes fondamentaux des WLAN du Collège Champlain (Saint-Lambert) ont participé. Le Collège Champlain (Saint-Lambert) est un établissement scolaire public anglophone de la région de Montréal situé près de la station de métro Longueuil-Université de Sherbrooke. Les étudiants furent divisés en 7 équipes de 2 ou 3 étudiants. Chaque équipe ayant été assignée un secteur situé dans les villes et les arrondissements de Longueuil, Greenfield Park, Saint-Hubert, Brossard, Laprairie, Ahuntsic, Ville-Marie, Hochelaga-Maisonneuve, Rosemont, Saint-Laurent et Westmount. Les locaux de la Fondation de recherche Léger (Centre de recherche Hochelaga-Maisonneuve) servirent de centre opérationnel et comme lieu de rencontre pour le diner.
Le Collège Champlain (Saint-Lambert) a fourni un ordinateur portatif par équipe pour les étudiants qui n’en avaient pas à leur disposition et le professeur a fourni des GPS.
Les étudiants ayant reçu leurs équipements au cours du jeudi soir précédent, l’audit pu débuter vers 9h00. Chaque équipe d’étudiants s’est donné un lieu de rencontre à leur convenance, les secteurs attribués ayant été assignés en fonction de leur lieu de résidence. Ils se sont tous rejoints vers 13h00 pour un diner pizza suivi d’un compte rendu de l’activité.
Le War driving est une activité qui consiste à se promener avec un ordinateur portable ou un dispositif portatif (PDA, scanner), pour détecter des réseaux sans fil. Cette activité a débuté dans la région de San Francisco (Californie, États-Unis) par un groupe d’utilisateurs sans fil de la région de la baie de San Francisco (BAWUG). Le terme War driving provient de War dialing, qui a été popularisé dans le film Wargames (1983).
Le war driving est possible parce que les utilisateurs de réseaux sans fil, par manque de connaissances, manque de temps, par ignorance ou par paresse, configurent inadéquatement (ou pas du tout) leurs points d’accès sans fil. Dans beaucoup de cas, les dispositifs sont sans protection parce que la configuration par défaut qui était en place quand le dispositif a été acheté est employée. Par exemple, dans les données de l’exercice, 30,3% utilisent le canal 6, souvent celui réglé à l’usine.
Lors de l’exercice, un total de 42128 dispositifs furent trouvés, ce qui constitue l’échantillon utilisé pour cet article (n=42128).
|
Item |
Automne 09 |
Hiver 09 |
Hiver 08 |
Automne 07 |
Hiver 07 |
|||||
|
n |
% |
n |
% |
n |
% |
n |
% |
n |
% |
|
| Sample |
42128 |
100 |
8780 |
100 |
8488 |
100 |
14906 |
100 |
330 |
100 |
| Sans Encrypt |
4774 |
11.3 |
1110 |
12.6 |
1925 |
22.7 |
3618 |
24.3 |
103 |
31.2 |
| Avec Encrypt |
37354 |
88.7 |
7670 |
87.4 |
6563 |
77.3 |
11288 |
75.7 |
227 |
68.8 |
| Canal 1 |
7440 |
17.7 |
1528 |
17.4 |
941 |
11.1 |
1716 |
11.5 |
33 |
10.0 |
| Canal 2 |
1995 |
4.7 |
236 |
2.7 |
101 |
1.2 |
180 |
1.2 |
8 |
2.4 |
| Canal 3 |
1802 |
4.3 |
313 |
3.6 |
134 |
1.6 |
257 |
1.7 |
2 |
0.6 |
| Canal 4 |
2077 |
4.9 |
369 |
4.2 |
323 |
3.8 |
369 |
2.5 |
3 |
0.9 |
| Canal 5 |
1050 |
2.5 |
179 |
2.0 |
85 |
1.0 |
147 |
1.0 |
4 |
1.2 |
| Canal 6 |
13184 |
30.3 |
3206 |
36.5 |
4353 |
51.3 |
7406 |
49.7 |
178 |
53.9 |
| Canal 7 |
1071 |
2.5 |
193 |
2.2 |
84 |
1.0 |
172 |
1.2 |
4 |
1.2 |
| Canal 8 |
1828 |
4.3 |
318 |
3.6 |
163 |
1.9 |
272 |
1.8 |
3 |
0.9 |
| Canal 9 |
1458 |
3.5 |
323 |
3.7 |
183 |
2.2 |
295 |
2.0 |
5 |
1.5 |
| Canal 10 |
995 |
2.4 |
205 |
2.3 |
176 |
2.1 |
332 |
2.2 |
5 |
1.5 |
| Canal 11 |
9629 |
22.9 |
1918 |
21.8 |
1948 |
23.0 |
3852 |
25.8 |
85 |
25.8 |
Tableau 1 : sommaire des résultats
Il y a des similitudes entre les mesures de cet exercice et ceux des exercices précédents. Des 42128 dispositifs inclus dans l’échantillon, 11.3% sont non chiffrés. C’est légèrement mieux que le 12.6% identifié dans l’exercice précédent, mieux que le 22.71% de l’année précédente et bien mieux que le 31.2% de l’hiver 2007. Les résultats montrent une amélioration continue de la situation.
Comme dans l’exercice précédent, le problème potentiel de la proximité étroite des dispositifs sans fil utilisant les mêmes fréquences et les mêmes canaux (6 et 11) fut observé. Les utilisateurs de ces dispositifs doivent probablement avoir des problèmes de performance. Cependant, c’était en dehors de la portée du projet, les étudiants n’ayant pas les outils requis afin d’évaluer cette problématique particulière. D’autres canaux utilisés sont 36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161. Ces canaux sont probablement utilisés dans une tentative futile de mettre en place une illusion de sécurité.
Conclusion
De façon générale les étudiants ont semblé tout à fait satisfaits de l’expérience, comme par les années précédentes, leur permettant d’observer sur le terrain des concepts théoriques vus en classe. Il n’y eut aucun problème avec les résidants. En comparaison aux années précédentes les données sont encourageantes, car elles montrent une certaine amélioration de la situation et une réduction du risque associé à l’utilisation des réseaux sans fil. Cependant, les efforts continus de sensibilisation des utilisateurs à l’échelle provinciale à la sécurité de l’information doivent être maintenus pour maintenir ces bons résultats dans le temps et pour continuer à améliorer la situation. Comme nous l’avons dit à maintes reprises dans le passé, c’est par l’éducation que le changement durable peut émerger.
Bibliographie
Léger, Marc-André (2007, 2008 et 2009) présentations en classe, disponibles sur www.leger.ca
11.07.09
by Marc André Léger, DESS, MASc (MIS), PhD (Candidate)
Professor, Champlain College (Saint Lambert)
Lecturer, University of Sherbrooke – Longueuil
Summary
On Saturday, November 7th, 2009 from 9:00a.m. to 13:00, students from the Wireless Networking program at Champlain College Saint-Lambert under the supervision of their professor, Marc-André Léger, performed a wireless network security audit in the streets of Montreal, Quebec, Canada as an educational activity. This document presents an overview of what was done and a summary of the results.
Audit objectives
This was primarily intended as an educational activity inspired by media reports and documentaries on the vulnerabilities of home wireless networks. Similar activities had taken place in 2007, 2008 and in the spring of 2009 with previous cohorts of students from the same program. As before, the principal objective from an educational point of view was to provide the students with hands-on experience in performing a wireless network audit). The general objective was to perform a partial area Wireless LAN audit and map the wireless networks (either home or business) that where found. This would give the students an idea of the current situation of wireless networks in the Montreal region.
As in the previous exercises, to respect the right to privacy of residents, students where instructed to only observed IEEE 802.11x data packets and signals present outside the limits of private property, never trespassing. Students had been strictly advised that all activities where being performed on public propriety as a community service activity. No attempt to access computer facilities, files or resources was to be undertaken by students. This was also done to respect Art. 342.1 of the Criminal Code of Canada.
Activity logistics
Fourteen (14) students participated from the WLAN Fundamentals course. The students where divided in 7 teams of 2 or 3 students. Each team was assigned an area in various areas in the Montreal region. These where located in the cities and neighborhoods known as: Brossard, Laprairie, Saint-Laurent, Westmount, Lasalle and Montreal (Ahuntsic, Villeray, St-Michel, Plateau Mont-Royal and Hochelaga-Maisonneuve districts). These areas where convenient to students, based on their area of residence. Students who participated in the exercise where required to have a laptop per team, equipped with a wireless (802.11b, g or n) network adapter and open source software (netstumbler). Students who did not have this equipment had one supplied by the College. As well, the teacher provided GPS devices to students.
War driving or WLAN Security audit ?
War driving is the act of driving around an area searching using a laptop computer or a portable device (PDA, Scanner), to detect networks. The name War driving comes from war dialing, which has been popularized in the 1983 movie WarGames. As for the previous exercise, it was decided to call the exercise a WLAN Security Audit as War Drive has negative connotations.
War driving is possible because users of wireless networks, due to lack of knowledge, lack of adequate information, ignorance or laziness leave their wireless access points unsecured. In many cases the devices are unsecured because the default configuration that was in place when the device was purchased is still being used.
Findings
During the war drive a total of 42128 devices where found, this is a significant increase from the numbers that where identified in the past. We suggest that this increase may be caused by several factors:
For this article, all the devices where used to form the sample (n=42128).
|
Item |
Fall 09 |
Winter 09 |
Winter 08 |
Fall 07 |
Winter 07 |
|||||
|
n |
% |
n |
% |
n |
% |
n |
% |
n |
% |
|
| Sample |
42128 |
100 |
8780 |
100 |
8488 |
100 |
14906 |
100 |
330 |
100 |
| Encrypt. OFF |
4774 |
11.3 |
1110 |
12.6 |
1925 |
22.7 |
3618 |
24.3 |
103 |
31.2 |
| Encrypt. ON |
37354 |
88.7 |
7670 |
87.4 |
6563 |
77.3 |
11288 |
75.7 |
227 |
68.8 |
| Channel 1 |
7440 |
17.7 |
1528 |
17.4 |
941 |
11.1 |
1716 |
11.5 |
33 |
10.0 |
| Channel 2 |
1995 |
4.7 |
236 |
2.7 |
101 |
1.2 |
180 |
1.2 |
8 |
2.4 |
| Channel 3 |
1802 |
4.3 |
313 |
3.6 |
134 |
1.6 |
257 |
1.7 |
2 |
0.6 |
| Channel 4 |
2077 |
4.9 |
369 |
4.2 |
323 |
3.8 |
369 |
2.5 |
3 |
0.9 |
| Channel 5 |
1050 |
2.5 |
179 |
2.0 |
85 |
1.0 |
147 |
1.0 |
4 |
1.2 |
| Channel 6 |
13184 |
30.3 |
3206 |
36.5 |
4353 |
51.3 |
7406 |
49.7 |
178 |
53.9 |
| Channel 7 |
1071 |
2.5 |
193 |
2.2 |
84 |
1.0 |
172 |
1.2 |
4 |
1.2 |
| Channel 8 |
1828 |
4.3 |
318 |
3.6 |
163 |
1.9 |
272 |
1.8 |
3 |
0.9 |
| Channel 9 |
1458 |
3.5 |
323 |
3.7 |
183 |
2.2 |
295 |
2.0 |
5 |
1.5 |
| Channel 10 |
995 |
2.4 |
205 |
2.3 |
176 |
2.1 |
332 |
2.2 |
5 |
1.5 |
| Channel 11 |
9629 |
22.9 |
1918 |
21.8 |
1948 |
23.0 |
3852 |
25.8 |
85 |
25.8 |
Table 1: summary of results
Based on the data, there has been a lot improvement in the last year. Of the devices included in the 2009 sample, 11.3% where unencrypted. This is an improvement from the already good result of 12.6% in the spring and much better that the 22.7% from 2008, the 24% from the Fall 2007 exercise and the 31% from the Winter 2007 exercise.
As in all the previous exercises, the potential problem of the close proximity of multiple wireless devices using channel 6 was found. As before, the use of other channels, channel 1 and 11, has increased. These are distant enough (4 channels minimum) to avoid, or significantly reduce, interference. We also found that some AP’s where configured using channels 36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161.
Conclusion
Overall the students seemed quite pleased by the experience as per previous years, allowing them to visualize some of the theoretical concepts seen in class. Compared to previous years the data shows a lot of improvement in wireless network security. While the results from 2007 and 2008 where far from being an ideal situation, the current results indicate that the trend that had been identified in the past continues: users of wireless networks are taking security more seriously. In the past we suggested that this may perhaps be in part the result of IT security awareness campaigns that took place in Québec in the last year and of numerous news reports and documentaries on Information Security.
Bibliography
Léger, Marc-André (2008) Class presentation for the course WLAN Fundamentals, available on www.leger.ca
10.06.09
Télchargez la conférence de Marc-André Léger présenté samedi prochain 8h30am au Forum Social Quebecois (PDF) http://www.upopulaire.ca/fichiers/FSQ2009-Upop.pdf/
09.14.09
Je vais participer à la conférence Podcamp – Montréal la fin de semaine prochaine. J’y donne une conférence intitulée: Le podcast comme outil en éducation. Lors de cette conférence, je parlerai de mes expériences avec les Podcast et vidéocast à l’Université de Sherbrooke depuis 2006 et à l’Université Populaire Hochelaga-Maisonneuve depuis 2008. Mes podcast vidéo (videocast), disponible sur Google Video, youTube ou ailleurs ont été visionnés des milliers de fois sur internet. Sur mon site de WebTV ( http://www.livestream.com/LegerTV ), il y a eu plus de 5000 heures de visionnement. Certains de mes podcast sont accessibles seulement aux étudiants inscrits, j’expliquerai pourquoi… et tenterai de comprendre, avec vous, pourquoi j’ai reçu des menaces de mise en demeure d’une Faculté universitaire réfractaire au changement.
J’expliquerai aux enseignants comment combiner l’enseignement magistral, le podcast, Twitter, FaceBook, les WiKi, LMS et les nouveaux médias en général pour créer une expérience d’apprentissage adaptée aux étudiants 2.0 qui plairait à Piaget, Skinner et McLuhan. Je parlerai aussi de mes expériences en éducation populaire et avec les aînés. Je parlerai des outils, des coûts et du processus.
Vous pouvez obtenir une copie PDF de ma présentation.
Un vidéo de ma présntation: http://www.crhoma.org/video/Podcamp2009/mal-podcamp2009.wmv
This conference is in french, but I will answer questions in both english and french.
08.27.09
08.18.09
Money, politics, or revenge motivates the insider who commits fraud, compromises sensitive data, or sabotages a network. While “insider threat” causes such losses, it’s insider risk — potential financial damage through lost revenue, or damage to brand equity, reputation, intellectual property, or even human life — that organizations manage through access control. This white paper explores insider attacks and insider risk, and shows how to control them by controlling and monitoring access. The paper also describes the more common vulnerabilities exploited by insider attacks and a method for assessing insider risk. |
![]() DOWNLOAD NOW |
Uncertainty about the economy is causing many IT executives to reevaluate current and new initiatives. This white paper defines the challenges facing IT executives, and outlines actions they can take now to cut costs, increase productivity and get more out of existing IT investments. |
![]() DOWNLOAD NOW |
Decision Management answers four imperatives for businesses seeking to thrive in today’s difficult environment. This white paper shares FICO’s decades of experience helping enterprises compete more effectively using decision management technology. |
![]() DOWNLOAD NOW |
Discover the unique support for data warehousing and business intelligence offered by the IBM DB2 portfolio. This white paper shows how an IBM System z server, integrated with the IBM DB2 family of solutions, can help you meet requirements for data warehousing and business intelligence. |
![]() DOWNLOAD NOW |
Preventing the installation and execution of unauthorized software should be a high priority for any IT-conscious organization. Allowing users to install or execute unauthorized software can expose an organization to a variety of stability, security, and legal risks, not to mention the burden of support costs. This paper will compare and contrast a variety of techniques for detecting and preventing unauthorized code. |
![]() DOWNLOAD NOW |
Stop paying more for less space and fewer features in your blade solution. Instead, choose a solution designed specifically for distributed enterprises. Read how IBM BladeCenter S provides greater capabilities — including 9TB of flexible storage, low noise, a specialized rack with air filtration and available layer 2-7 secure switching — at a lower price than HP Blade System c3000. |
![]() DOWNLOAD NOW |
08.15.09
100 Tips, Tools, and Resources for Teaching Students About Social Media http://su.pr/1f9LqR
Tips and Resources for Educators
From tips on combating fear of social media to tools and articles to help guide you, these resources will get you off to a good start.
Networking
Help students learn about networking with these tips and resources.
Creating a Positive Web Presence
Students should learn from the very beginning that everything they do online says something about them–and will always be a part of their web presence. Help guide them with these resources.
Blogging
Learn how to set up a classroom blog, safety rules for students, laws everyone should be aware of, and more.
Social Networking Sites
While some of these popular social networking sites are for students only, others are for anyone.
One of the hottest social media trends right now, Twitter is a great way for student to connect with each other, keep updated on the news, and more. These tips and tools will help them know how.
Getting Ready for College
From helping students prepare for online education to social networks that lend money for education, these resources offer help to students getting ready to head off to college.
Job Hunting
Job hunting through social media is the new way to find employment. Help prepare your students by teaching them how to utilize their social media skills to find a job.
Open Courseware Classes
These open courseware classes offer opportunities for both the teacher and students to learn about social media. Whether you want to take these free classes yourself or incorporate them into your lessons, they are a valuable resource.
08.07.09
Expert Now IEEE is a new, innovative product line which features the best of IEEE’s educational content delivered in one-hour long online learning modules. It contains the latest information on emerging technologies and seminal works presented at the best of IEEE’s conference tutorials, short courses and workshops and is available 24×7 worldwide with the benefit of eliminating time away from work and travel costs.
Find out more about IEEE Expert Now, visit: http://www.ieee.org/portal/pages/education/Expert_Now_IEEE/index.html
07.15.09
Students and teachers in Brunei will be given cloud-based email accounts by the end of this month, opening up opportunities for collaborative learning in the future.
“Students from year four onwards, teachers and school leaders will be given the official school email account hosted for free,” said Hj Mohd Yussof Hj Metassim, Acting Director of Brunei Ministry of Education (MoE)’s Information and Communication Department.
The MoE has started training users of the new email programme.
Setting up email accounts is part of the Microsoft Live@Edu Programme, which has collaborative tools for students and teachers to participate in online tutorials and discussions, collaborate on assignments, share calendars and workspaces.
MoE will also create an online Teachers’ Assessment Questionnaire to measure all teachers’ information technology (IT) skills and how well they use ITfor teaching.
The results will help MoE match training courses to the needs of individual teachers, added Metassim.
Source: http://www.futuregov.net/articles/2009/jul/13/schools-brunei-enter-cloud/
By Kelly Ng | 13 July 2009