Slashdot Mirror
AirTraf 802.11b Security Package
An anonymous reader writes "Being ignorant of network vulnerabilities is a happy condition for only so long. Ignorance is bliss, right up until someone with rogue access drives away with your company secrets. This article covers information about AirTraf, an open source package, which performs a number of tasks, such as determining the Service Set Identifier of the access points, and the channel it is operating under. It can tell how many wireless nodes are connected to a given access point, as well as that point's total load. AirTraf is capable, too, of polling a number of sniffers through a central polling server in order to collect the most current information. The least of your fears should be the leeching of your Internet connectivity. Industrial espionage is a growing reality that you must confront."
I resent that remark. I know that two of our contributors have been linked to break ins at sites that recently installed AirTraf, however I assure you that we (the AirTraf team in general) had nothing to do with that.
Ever since that I've had to fight this notion tooth and nail. We do do security audits of our product, and we know exactly what information it transmits back to us. AirTraf absolutely does NOT tell us about any vulnerabilities you choose to leave in your network, and by default it will lock it down in many very useful ways.
I know it is said that security is a process, not a product. However, a good selection of security products and settings is the key to that process, and AirTraf is a very important product for locking down wireless networks.