Wi-Fi Infrastructure Assessment

Low deployment costs make wireless networks attractive. However, the easy availability of inexpensive equipment also gives attackers the tools to launch attacks on the network, eavesdrop on, or tamper with, wireless transmissions and access sensible data. Through the Wi-Fi Infrastructure Assessment, Yoroi measures the level of security of wireless communications analysing the response of the systems when faced with various critical situations, from high utilisation levels to passive and active attacks. Yoroi usually analyses:

• service status of devices, operating periods and versions of the hardware and software in use
• infrastructure fragility, software systems and apparatuses experiencing instability, high loads or frequent changes of use
• communication protocols, data confidentiality and integrity exchanged through the medium
• presence of intrusion detection controls, suspicious or unauthorised activities and alteration of signals
• administrative access to the devices and extension of access signal
• configuration errors and credentials weak passwords
• response against unauthorised access point systems (fake AP)

The methods adopted by Yoroi for Wi-Fi infrastructure tests ensure effective measurement of the levels of security of local business networks perimeter. The assessment is carried on in two stages: a first one during which the Wi-Fi security is actively tested by an attacker interacting with the access point, a second one off-line. A technical report, an executive summary and a technical appendix will be delivered at the end of the assessment to document the outcome.