Wi-Fi 'wartrappers' snare the drive-by hackers

NEWS A "honeypot" trap consisting of a Wi-Fi-equipped laptop is the latest weapon against drive-by hackers. Set up at the London headquarters of consultants KPMG, the laptop looks to the outside world like a simple wireless access point, but contains monitoring software designed to determine the level of illicit activity. "We are trying to measure the number of wardrivers, and the level of attack they are attempting," said Michael van Strien of KPMG, revealing the device at the RSA security conference in Paris. He plans to publish some results in the next month or two, which will give an idea of the level of the much discussed threat of "wardriving", where hackers outside an office gain access to unsecured wireless access points. "We're looking at the number of hits and how many try to get network addresses," said van Strien. The honeypot will be a laptop with a Prism wireless LAN card, which can act as a Wi-Fi access point. The laptop will have no other network connection, but will appear to the hacker as a possible entry point to the corporate network. Van Strien plans to run several honeypots in different offices across London, and move them about within the buildings, so that if wardrivers become aware of their existence they will not know for sure which are real access points and which are honeypots. If successful, he plans to package the honeypot up as a security tool for corporate Wi-Fi users. "It needs a beautiful user interface," he said. One conference delegate noted that if the idea takes off, it is easy to imagine that the hacker community will respond with a new warchalking symbol. Perhaps, he remarked, this would be a "Pooh" style honeypot marked on the pavement where a honeypot is suspected. KPMG also launched a managed security service at the RSA conference. "This goes beyond monitoring services such as those offered by Counterpane or Unisys," said KPMG partner Malcolm Marshall. "People were wary of handing security over to a third party, but those people have done a great job of raising awareness." The service already has six customers but, as with most such services, they are not keen for their names to be made public. Peter Judge reported from the RSA Conference in Paris.

For all security-related news, including updates on the latest viruses, hacking exploits and patches, check out ZDNet UK's Security News Section. Have your say instantly, and see what others have said. Go to the Security forum. Let the editors know what you think in the Mailroom.

Post your comment

In order to post a comment you need to be registered and logged in

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Membership FAQ

ZDNet UK Live

love the LHC info. Keep up the good work. May God bless all in volved.

3 hours ago by georgiox on LHC to run for longest continuous period

You are quite right. HDS has not been marketing their products well. USPV is miles ahead in terms of ease of use and technology on enterprise...

8 hours ago by sgardia on Will the SUN set on Hitachi Data Systems OEM relationship?

Fedora is the same way as well. The yum update system uses "presto" which shrinks the amount of data needed for download. It's a great system....

19 hours ago by apexwm on Can you believe it - 2765 kB will be freed?

Updated ID cards considered for 2012: [zdnet.co.uk] The government is considering introducing a new generation of ID... http://dlvr.it/KpBZ

19 hours ago on Twitter by cybfor

Google, Viacom trade blows in YouTube copyright spat: [zdnet.co.uk] Google and the US media giant Viacom have issued... http://dlvr.it/Knht

21 hours ago on Twitter by cybfor

Be sure to include an audio option - eg. a beep tone - to intensify and reiterate the action. This will greatly benefit some consumers and give...

21 hours ago by CIMITL

Data disposal is really important to get right. There are standards set by UK and US federal governments to ensure that data is kept secure. If...

21 hours ago by DataSecurityUK

Online Fiber Optic Certification Join a talented group of professionals, who are dedicated to Fiber Optic Networking technology. The online course...

23 hours ago by chaycon1 on BT launches 40Mbps fibre-based broadband

Online Fiber Optic Certification Join a talented group of professionals, who are dedicated to Fiber Optic Networking technology. The online course...

23 hours ago by chaycon1 on Google to build gigabit broadband to the home

Hi Dava, I'm glad to hear from you, and glad that you see things from the other side. I think that is the most important point of the whole...

23 hours ago by J.A. Watson on Ubuntu 10.04 (Lucid Lynx) and the Latest Tempest

please please please please please please kill that spam bot.

24 hours ago by dava4444 on ZDNet UK: faster, smarter, still IT all the way

1 day ago by 253chelisa253 on How security will look in 10 years

it is only greedy[microsoft]?

1 day ago by lezlow on Researchers break into BitLocker

it didn't post the link it's 'Ubuntu 10.04 Lucid Lynx Beta-1 First Look' on youtube :) Dava

1 day ago by dava4444 on Ubuntu 10.04 (Lucid Lynx) and the Latest Tempest

Hi James I disagree, Ubuntu needs a GUI update and this one IMO is quite good. your pics show a low res. here's a high res. on YouTube* The...

1 day ago by dava4444 on Ubuntu 10.04 (Lucid Lynx) and the Latest Tempest

Hi any news on the comment bot? knocking me back from my own blog is a bit cheeky lol *Mulder to Scully* "I think it has an agenda.." I know, I...

1 day ago by dava4444 on ZDNet UK: faster, smarter, still IT all the way

if you look at the Brentwood exchange on samknows it servers 21,000 residential propertiesm, Lowestoft serves 31,000! Come on BT sort yourselves...

1 day ago by benny boy on BT fibre broadband coming to 69 more towns

[programming] H.264 - a sting in the tail http://reddit.com/bfu4q [zdnet.co.uk]

1 day ago on Twitter by pbreddit

H.264 - a sting in the tail [programming] 13 points, submitted by zigzag [zdnet.co.uk] http://reddit.com/bfu4q

1 day ago on Twitter by reddit

Malware infects second Vodafone HTC phone: [zdnet.co.uk] A second Android-based HTC Magic from Vodafone has been... http://dlvr.it/KhKx

1 day ago on Twitter by cybfor

Featured white papers

Achieving PCI Compliance for:Privileged Password Management & Remote Vendor Access

e-DMZ Security

For multi-store outlets, including retail, banking, grocery, gas, hospitality, convenience stores and others, reducing (or avoiding) the cost of in-store system support and maintenance while maintaining compliance with PCI and other requirements has become a strategic challenge.

Download now

Web 2.0 Security Threats: How to Protect Your Enterprise Network

Qualys

Speaker: Dr. Chenxi Wang, Principal Analyst, Security and Risk Management, Forrester Research, Inc. As Enterprises are increasingly connected to the Internet and as hard organizational boundaries are fast disappearing, security professionals are facing fresh challenges in Enterprise computing.

Download now