Monitoring WIFI Network for Malicious Use

[paul at pauldotcom.com (Paul Asadoorian)]

A few thoughts:

1) Take my new course when its complete (one day course on Wireless IDS
using open-source and inexpensive hardware) :)

2) Monitor all of your traffic coming from the wireless network into
your wired network with Snort or some other IPS/IDS

3) Captive Portal - Can you implement an authentication captive portal
on the open wireless network?  This could give you some more
flexibility, as in authenticated users can always get on, but guests
with no credentials are limited between 9am-5pm.

Cheers,
Paul

infolookup at gmail.com wrote:
> Its kind of confusing see its a college, and the last class is at 9pm but faculty members might stick around later, 
> the are also Saturday classes too.
>
> That's why I am looking for a way to monitor the LAN ((wifi) and get an idea of a baseline, so I can try to pick up 
> whenever the are malicious usage
> ------Original Message------
> From: Robin Wood
> Sender: 
> To: infolookup at gmail.com
> To: PaulDotCom Security Weekly Mailing List
> Sent: Nov 1, 2008 1:29 PM
> Subject: Re: [Pauldotcom] Monitoring WIFI Network for Malicious Use
>
> 2008/10/31  <infolookup at gmail.com>:
> > So my real question is what can we do to monitor the LAN this way if we know that no users are there after 7 pm and 
> > there is access then its not allowed.
>
> Why not just power it down at 7PM? Why monitor when you can just disable it?
>
> Robin
>
>
> Sent from my Verizon Wireless BlackBerry
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com

-- 
Paul Asadoorian
PaulDotCom Enterprises
Web: http://pauldotcom.com
Phone: 401.829.9552

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 257 bytes
Desc: OpenPGP digital signature
Url : http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20081103/0652dbc9/attachment.pgp