Driveby Hacking on the Go, part 2

Right now, a lot of war driving is apparently still being done just for fun. Driveby hackers catch a bit of free Internet access, or eavesdrop on e-mail. However, if left wide open, the security holes in wireless networks carry the potential for much more serious consequences.

In one Internet newsgroup forum, a war driver recently pointed to wireless LANs, located within a certain retail giant's distribution warehouses, as good "targets" for testing out driveby hacking equipment.

Lasell College in Newton, Massachusetts is one of many colleges and universities currently building wireless LANs. "We have one wireless network with two domains: one for faculty/staff, and the other for students," says Deborah Gelch, Lasell's director of information technology.

Lasell has used Bluesocket's solution to give greater bandwidth priority to faculty/staff, as well as to provide them with more access to college resources.

Gelch claims to hold no particular qualms about war driving, per se. "But I've definitely had some concerns about students -- particularly some of the students in our computer science program, and other sophisticated users. We host a summer computer camp, and this has made me even more concerned. The main reason we're using Bluesocket is for security. We don't want students to be able to hack into (the administrative network) through either the wired or wireless side of things."

Other network administrators worry over the dangers posed by unauthorized wireless LANs on company property. The Gartner Group estimates that at least 20 percent of enterprises have rogue wireless LANs attached to their networks.

ReefEdge's Gopal equates the rise of these wireless rogues to the wired LAN phenomenon of a couple of decades ago.

"Back then, some miscreants would decide to go out and buy a few 386es, and put up their own departmental LANs. Nowadays, with wireless LAN equipment so easily available, some people are saying, 'Gee, I want one in my office.' You, as network administrator, need to embrace wireless, before people inside your company get those rogue access points out there," Gopal advises.

"Even if you (threatened to) fire them as a penalty, people would still set up unauthorized wireless LANs. All they need to do is pop a card into their PC, and plug an access point into their office wall. It can be very difficult for companies to detect rogue LANs," agrees Bluesocket CEO Eric Janszen.