Re: Wireless network assessment

[Javier Fernandez-Sanguino <jfernandez () germinus com>]

Andres Martinez wrote:
> I'm ready to perform my first wireless security assessment, I have
> some experience performing wired security assesments, more than the
> tools that are available to perform the scan, I'm concern for the
> testing methodology and procedures since I believe that the nature of
> the wireless world it is totally different, can somebody point me to
> the right direction

You are very lucky. ISECOM just released "OSSTMM Wireless" a manual with
methodology on how to test wireless networks. Very in-depth and thorough.
You can find it here:
http://www.isecom.org/projects/osstmm.htm

As for the wireless world, I find NIST's Special Publication 800-48 very 
enlightening. It is available at 
http://www.csrc.nist.gov/publications/nistpubs/800-48/NIST_SP_800-48.pdf

Regards

Javi


---------------------------------------------------------------------------
Network with over 10,000 of the brightest minds in information security
at the largest, most highly-anticipated industry event of the year.
Don't miss RSA Conference 2004! Choose from over 200 class sessions and
see demos from more than 250 industry vendors. If your job touches
security, you need to be here. Learn more or register at
http://www.securityfocus.com/sponsor/RSA_pen-test_031023
and use priority code SF4.
----------------------------------------------------------------------------