4.1 Securing wireless & Mobile

Question 1

Site surveys

Answer 1

• Determine existing wireless landscape
  –Sample the existing wireless spectrum
• Identify existing access points
  –You may not control all of them
• Work around existing frequencies
  –Layout and plan for interference
• Plan for ongoing site surveys
  –Things will certainly change
• Heat maps
  –Identify wireless signal strengths

Question 2

Wireless survey tools

Answer 2

• Signal coverage
• Potential interference
• Built-in tools
• 3rd-party tools
• Spectrum analyzer

Question 3

Mobile Device Management (MDM)

Answer 3

• Manage company-owned and user-owned mobile devices
  –BYOD - Bring Your Own Device
• Centralized management of the mobile devices
  –Specialized functionality
• Set policies on apps, data, camera, etc.
  –Control the remote device
  –The entire device or a “partition”
• Manage access control
  –Force screen locks and PINs on these single user devices

Question 4

BYOD

Answer 4

• Bring Your Own Device
  –Bring Your Own Technology
• Employee owns the device
  –Need to meet the company’s requirements
• Difficult to secure
  –It’s both a home device and a work device
  –How is data protected?
  –What happens to the data when a device is sold or
  traded in?

Question 5

COPE

Answer 5

• Corporate owned, personally enabled
  –Company buys the device
  –Used as both a corporate device and a personal device
• Organization keeps full control of the device
  –Similar to company-owned laptops and desktops
  –Information is protected using corporate policies
  –Information can be deleted at any time
• CYOD - Choose Your Own Device
  –Similar to COPE, but with the user’s choice of device

Question 6

Cellular networks

Answer 6

Mobile devices
–“Cell” phones
–4G, 5G
* Separate land into “cells”
–Antenna coverages a cell with certain frequencies
* Security concerns
–Traffic monitoring
–Location tracking
–Worldwide access to a mobile device

Question 7

WI-FI

Answer 7

• Local network access
  –Local security problems
• Same security concerns as other Wi-Fi devices
• Data capture
  –Encrypt your data!
• On-path attack
  –Modify and/or monitor data
• Denial of service
  –Frequency interference

Question 8

Bluetooth

Answer 8

• High speed communication over short distances
  –PAN (Personal Area Network)
• Connects our mobile devices
  –Smartphones
  –Tethering
  –Headsets and headphones
  –Health monitors
  –Automobile and phone integration
  –Smartwatches
  –External speakers