1. ©2015 NETSCOUT ° CONFIDENTIAL & PROPRIETARY

2. DYNAMICALLY DEFEND AGAINST WLAN THREATS
+ get template from Chris and change!!!
+ team introduction, research and solution

3. 2014: A BUSY YEAR FOR SECURITY INCIDENTS
2010
2011
2012
2013
2014
PwC Global State of Information Security Survey Q3 2014
1) Compare 2014 with 2013
CAGR Compound Annual Growth Rate
Pick some “big names”
+ avoid using company logo, just voice over
+ use color logo
+ find some WiFi related incidents
+ 2) Our system has seen “these attacks” from our customers networks
Increase in cyber-attacks for 2014

4. ATTACKS REQUIRE QUICK RESPONSE
85,611,528
Records Exposed
783
Confirmed Data Breaches
ITRC Data Breach Report Dec 2014
WLAN threats happen quickly!
Can’t wait months or even weeks to update AP/Sensor
Much like anti-virus software defends your computer, we need our WLAN protected 24x7 and remain up-to-date against the latest security threats
Ask Audience who recognize 3+ attacks/tools in the picture
Most tools are free or very low cost, and easy to use
Rapid response to WLAN Threats

5. SIMPLE ATTACK EXAMPLE – WIFI PINEAPPLE
Karma attack
I really feel like eating an apple
Hey I’m an apple
Inexpensive
Highly portable
Dual Radios
Large community support
Targets clients probing for preferred networks

6. AIRMAGNET ENTERPRISE DYNAMICALLY RESPONDS
Dynamic Threat Update (DTU) technology provides the maximum WIDS/WIPS security posture for your WLAN network.
Customer AME Console
DTU
Sensors update
new signature
Server downloads new signature module
Server checks for update
New module activated on-the-fly, no down time
New alarms merged into all existing policies
Remote site
Customer AME Server
AME protects against +230 threats …and counting…
20s overview AirMagnet Enterprise (3 component)
describe update process at the beginning, architect
DTU Engine was newly designed to fully support dynamic update
No system down time
DTU update includes both alarm detection and explanation pages
DTU alarm supports all existing countermeasure methods
(bring laser pointer)
Similar to antivirus software – we provide updates in real time!

7. RAPID RESPONSE TO THREATS
DTU Protects against threats….
WPA Dictionary Attack
Virtual Carrier Flood by Node
RTS Flood by Node
AR.Drone Wireless Communication Detected
WiFi Pineapple Detected
OpenSSL TLS/DTLS Heartbeat Read Overflow
OpenSSL TLS/DTLS Heartbeat Read Overflow + Cupid
DJI Phantom Vision Drone Detected
Broadcom RSN Out of Bounds DoS
Enterprise Honeypot AP Detected
Wi-Fi Direct Fuzzing
Covert Channel Attack
Rapid response
Automatic, no downtime
Dedicated security team
Talk about AR.Drone, DJI Drone, quick answer to market and customer
Google Glass, WiFi Pineapple
Enterprise Honeypot AP, challenge+reponse, use asleap to crack password
Rapid response means peace of mind that you’re fully protected

8. SECURITY REQUIRES BEING CURRENT
Open discussion of WLAN security and its implications
Security discussion
Ask Audience who recognize 3+ attacks/tools in the picture
Most tools are free or very low cost, and easy to use
Education is the best weapon

9. THANK
YOU
NETSCOUT.COM