Dailydave mailing list archives
Wireless spaces
From: Dave Aitel <dave () immunityinc com>
Date: Thu, 20 Sep 2007 13:12:46 -0400
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Are any of the major vendors doing this? 1. Take any three wireless access points and have them each track client wireless signal strength. (This will map to physical space almost) 2. At the same time, have them track traffic type this client is doing and use this to generate a number of some sort. 3. Map these four things into a space and all your clients will be divided into "rooms" that you can draw bounding boxes around (much like Reliance HIDS did). 4. Do simple anomaly detection and you'll see a SILICA user in the parking lot stand out like a Suicide Girl in Utah. I think if you can tie the traffic clients generate with "where" the clients are, you'll get an interesting picture of things in general. You don't care in real world terms where they are, just where they are in the mathematical space. - -dave -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFG8qoNB8JNm+PA+iURAu1kAKDR4BJfFya+CqUFqgbNV5QCuhwH3QCglbNq X/jcsr5cCfbZ5+1sae7g47o= =mrwt -----END PGP SIGNATURE----- _______________________________________________ Dailydave mailing list Dailydave () lists immunitysec com http://lists.immunitysec.com/mailman/listinfo/dailydave
Current thread:
- Wireless spaces Dave Aitel (Sep 20)
- Re: Wireless spaces Zack Payton (Sep 20)
- Re: Wireless spaces J.M. Seitz (Sep 20)
- Re: Wireless spaces Adrien Krunch Kunysz (Sep 21)
- Re: Wireless spaces J.M. Seitz (Sep 20)
- Re: Wireless spaces Paul Melson (Sep 20)
- Re: Wireless spaces Zack Payton (Sep 20)