Split-analysis boosts wireless security

NETWORK WORLD NEWSLETTER: NETWORKING TECHNOLOGY UPDATE
08/15/05

Dear networking.world@gmail.com,

In this issue:

* The benefits of a blended approach to radio frequency
  security, split-analysis
* Links related to Networking Technology Update
* Featured reader resource
_______________________________________________________________
This newsletter is sponsored by Avaya
Network World Executive Guide: Evaluating VoIP in the Enterprise

Got VoIP? More and more companies are answering yes...the
reasons vary from cost savings, network flexibility, and ease of
administration. Yet others are drawn to the promise of advanced
VoIP applications such as unified messaging and collaboration.
Register now and get a free copy of Network World's Got VoIP?
Executive Guide, which outlines the keys to successful VoIP
deployments.
http://www.fattail.com/redir/redirect.asp?CID=110536
_______________________________________________________________
VOIP SECURITY THREATS: FACT OR FICTION?

Although it's difficult to find a company that has suffered at
the hands of VoIP abusers, viruses, spam and phishing have run
rampant on other IP-based communications systems. Will similar
threats find their way to VoIP? Find out what the experts say
and how should prepare your network against such potential
abuses. Click here:
http://www.fattail.com/redir/redirect.asp?CID=110061
_______________________________________________________________

Today's focus:

Split-analysis boosts wireless security

By Christopher Waters

Wireless security tools perform security analysis in sensors
scattered throughout a wireless LAN or in a central server, but
both options have drawbacks. With a server-centric approach, raw
data is backhauled from individual sensors to a server, where
advanced analysis, such as multi-sensor correlation, is
performed. However, data from thousands of sensors, each
requiring multiple megabits per second of backhaul, can
overwhelm a network and require large amounts of processing
power on the server, making this type of solution difficult to
scale.

A sensor-centric approach, in which the bulk of an analysis is
performed by sensors, makes more efficient use of bandwidth
because less data must be backhauled to the server and as a
result is more scalable. However, this approach calls for
sensors that require more processing power and memory, making
this approach more expensive in large deployments. Coverage
overlap can cause neighboring sensors to transmit unneeded
duplicate information to a server, and this approach is unable
to detect certain types of attacks, such as media access control
address spoofing, that require multi-sensor correlation.

A blended approach to radio frequency security, split-analysis,
avoids the problems of server- and sensor-centric solutions.
Split-analysis combines intelligent, purpose-built sensors for
first-stage analysis with a server that handles sophisticated
data analysis and anomaly detection. Distributing intelligence
in this way can improve detection accuracy, system scalability
and administrative simplicity. To maximize security
effectiveness, it's important to understand which aspects of the
analysis are best done by sensors and which are best done on a
server.

By splitting the analysis, sensors need to perform only generic
tasks that are not specific to any particular attack or
vulnerability. For example, sensors can monitor all incoming
WLAN activity and extract information such as Service Set
Identifiers or addresses from the headers of 802.11, Extensible
Authentication Protocol, IP and UDP/TDP packets. Because 802.11
communications are very chatty, duplicate traffic is identified
and compressed at the sensor before getting backhauled, saving
lots of bandwidth.

For the full story on split-analysis wireless security, see:
<http://www.networkworld.com/nltechupdate5056>

The top 5: Today's most-read stories

1. Cisco to double Catalyst 6500 switch capacity in coming
months, report says
<http://www.networkworld.com/nltechupdate5057>

2. Ex WorldCom CFO Sullivan gets 5 years in jail
<http://www.networkworld.com/nltechupdate5058>

3. Microsoft open source exec: Not the loneliest guy in Redmond
<http://www.networkworld.com/nltechupdate4818>

4. Cisco mulls acquiring Nokia, report says
<http://www.networkworld.com/nltechupdate5059>

5. IT staff shortage looming
<http://www.networkworld.com/nltechupdate5060>
_______________________________________________________________
To contact:

Waters is CTO for Network Chemistry. He can be reached at
cwaters@networkchemistry.com
_______________________________________________________________
This newsletter is sponsored by Avaya
Network World Executive Guide: Evaluating VoIP in the Enterprise

Got VoIP? More and more companies are answering yes...the
reasons vary from cost savings, network flexibility, and ease of
administration. Yet others are drawn to the promise of advanced
VoIP applications such as unified messaging and collaboration.
Register now and get a free copy of Network World's Got VoIP?
Executive Guide, which outlines the keys to successful VoIP
deployments.
http://www.fattail.com/redir/redirect.asp?CID=110535
_______________________________________________________________
ARCHIVE LINKS

Technology Update archive:
http://www.networkworld.com/news/tech/index.html
_______________________________________________________________
FEATURED READER RESOURCE
HARD WORK, GOOD PAY

According to Network World's 2005 Salary Survey, network
professionals are enjoying substantial increases in pay,
especially at the highest- and lowest-tier job titles. But are
those increases coming with higher titles, more work or both?
Find out if compensation alone is keeping network professionals
happy in their careers - or is something else? Click here:
<http://www.networkworld.com/you/2005/072505-salary-survey.html>
_______________________________________________________________
May We Send You a Free Print Subscription?
You've got the technology snapshot of your choice delivered
at your fingertips each day. Now, extend your knowledge by
receiving 51 FREE issues to our print publication. Apply
today at http://www.subscribenw.com/nl2

International subscribers click here:
http://nww1.com/go/circ_promo.html
_______________________________________________________________
SUBSCRIPTION SERVICES

To subscribe or unsubscribe to any Network World e-mail
newsletters, go to:
<http://www.nwwsubscribe.com/Changes.aspx>

To change your e-mail address, go to:
<http://www.nwwsubscribe.com/ChangeMail.aspx>

Subscription questions? Contact Customer Service by replying to
this message.

This message was sent to: networking.world@gmail.com
Please use this address when modifying your subscription.
_______________________________________________________________

Have editorial comments? Write Jeff Caruso, Newsletter Editor,
at: <mailto:jcaruso@nww.com>

Inquiries to: NL Customer Service, Network World, Inc., 118
Turnpike Road, Southborough, MA 01772

For advertising information, write Kevin Normandeau, V.P. of
Online Development, at: <mailto:sponsorships@nwfusion.com>

Copyright Network World, Inc., 2005