With all the new ideas circulating concerning wireless security, we can't forget the basic fact that the biggest security threat in the wireless world comes from the physical layer, or layer 1. I'm seeing customers expand/increase their Wifi foot print like it's nobody's business. Have IT professionals forgotten that the smaller your RF foot print, the fewer people you're gonna be visible to?
As the economy seems to get worse, I've noticed a few trends concerning my clients, and clients of colleagues; Read more
I'm still shocked at how little some admins know about their own networks. I often advise clients on the recon steps we take and suggest they do the same. For example, I've often been on sites that have clear and defined "no wifi" policies, but yet, during wireless LAN surveys paired with ARP discovery, we often find they indeed have wireless access points all over the place, and worse yet, nobody seemed to know it. I'll often see old Unix servers still connected to the network and not documented anywhere. It usually turns out these servers haven't been used (or patched) for years. Read more
Hello Network World community!
I'm Keatron Evans and will be blogging here on a regular basis. A little bit about me first. I'm currently a Senior Penetration Tester and Principle of Blink Digital Security based in Chicago. We currently service government and corporate clients. I'm also co-author of the upcoming book Chained Exploits: Advanced Hacking Attacks from Start to Finish. Read more
Keatron Evans is a senior penetration tester and principal of Blink Digital Security, based in Chicago. He has more than 11 years experience doing penetration tests, vulnerability assesments and forensics. Keatron regularly consults with and sometimes trains government entities and corporations in the areas of network penetration, SCADA security, and other related national infrastructure security topics. He holds several information security certifications including CISSP, CSSA, CEH, CHFI, LPT, CCSP, MCSE:Security, MCT, Security+, and others. When not doing penetration tests, you can find Keatron teaching ethical hacking and forensics classes worldwide.
We are giving away 15 copies of Keatron's book Chained Exploits: Advanced Hacking Attacks, which will be published in February. Go here for entry details.
The Leader in Network Knowledge
