Re: (Q) wireless networking classroom cheating examples

[Omar Herrera <omar_herrera () BANXICO ORG MX>]

> As wireless capability on campus becomes more ubiquitous and
> wireless-enabled devices become smaller (and therefore possibly harder
> to detect), it seems that maintaining exam ("closed-book") security is
> becoming a larger issue over time (especially in large lecture hall
> environments).

I think that handheld devices are far more dangerous than laptops
regarding exam cheating. It is much easier to use one of these devices
during an exam, without others noticing, than a laptop. Many handheld
devices have wireless capabilities these days.

Also you could configure many wireless devices to connect
point-to-point, which makes it more difficult to sniff the connection
since they won't be using the network of the University (all that is
needed is someone outside the classroom with another wireless device and
books to pass the answers to people inside the classroom).

There exists technology that actually "jams" wireless signals within a
room, this technology is used in banks and other security institutions.
Right now I don't believe that the problem is so big that it justifies
the creation of special "exam rooms" with these capabilities, but it
might be at some point, and at least for some exams it might be worth
putting this kind of security controls in place.
Some references worth checking:
http://archives.neohapsis.com/archives/vuln-dev/2002-q1/1049.html
http://www.public.iastate.edu/~sfr/wireless/w_tut_1.html
http://www.wirelessnewsfactor.com/perl/story/9856.html


There is still some issues with this kind of technology: It might be
illegal in some states and countries, so you should check the
legislation first. (see
http://lists.insecure.org/lists/vuln-dev/2002/Nov/0009.html for
example).


Regards,

Omar Herrera

Instituto Tecnológico y de Estudios Superiores de Monterrey,
Mexico City Campus
Information security topic and laboratory 

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/memdir/cg/.