Fluke AirMagnet Enterprise 9.0 WIDS/WIPS threat signature updates

Fluke has released threat signature updates for its AirMagnet Enterprise 9.0 wireless intrusion detection and prevention system (WIDS/WIPS).

The updates protect against wireless threats and vulnerabilities, including Karmetasploit and Apple’s new AirDrop feature.

By using its dynamic threat update, AirMagnet offers what is believed to be the only wireless LAN (WLAN) security system that can generate signature updates for immediate protection and automatically push them to users without requiring scheduled downtime or additional IT resources.

The following signature updates have been released: AirDrop - Apple’s Mac OS X Lion includes the AirDrop feature that lets multiple users share files wirelessly, which can be a violation of company security policies, creating security risks that could result in protected data being easily transferred to unknown machines outside the enterprise network, potentially leaving the network vulnerable to other active attacks; Karmetasploit is a man in the middle style attack that tricks a client into associating with a device masquerading as an access point running KARMA. This lets a hacker do any number of the following: gain access to the client machine, capture passwords, harvest data and conduct a wide variety of application exploits; a DHCP starvation attack run from a wireless client can cause other clients to connect to a malicious network. Wireless guest networks and unencrypted commercial hotspots are especially vulnerable to this attack, which can lead to lost productivity.