Wireless Networks Open Another Avenue for ID Theft
WBNS-10TV's Roger McCoy discusses identity theft on the February 4, 2003 installment of the "Stay Connected" series. Interhack's Pete Ware discusses a side to identity theft that many do not consider: the potential for thieves to collect personal information needed to steal others' identity with wireless networks.
On many corporate networks, a lot of information could be used to perpetrate identity theft and other crimes against the companies and their customers. Corporate networks frequently carry, among other things, "personal email, business plans, company finances," notes Ware. "It's all there for the picking when wireless networks are left unsecured."
(In the demonstration for WBNS-10TV, Interhack avoided making connections to any vulnerable networks and intercepting the contents of the traffic being broadcast. However, simply spending ten minutes searching for networks that advertise their presence resulted in the discovery of fifteen unsecured networks in downtown Columbus.)
In a recent test Interhack conducted for one of its clients, such personal data as names, addresses, telephone numbers, dates of birth, and social security numbers were being broadcast in the clear. By sitting in a car several hundred yards away, Interhack's Red Team successfully intercepted these data and more.
With the rise of identity theft as a major problem plaguing consumers and their lenders, individual vigilance is becoming more important daily, as discussed in Roger McCoy's piece, which also included helpful tips for combating identity theft.
However, even the most vigilant consumer cannot protect himself against someone stealing personal information from insecure networks. Organizations that maintain any information about people must be special attention to the need to keep their systems worthy of consumers' trust. Companies without the expertise to deploy technologies safely must bring in experts (Interhack would be happy to recommend some) or must be willing to forego the convenience potentially presented by the technology.
The cost of wireless networking is very low. However, when considering deploying wireless networks, be sure also to consider the cost of securing and maintaining those networks. Just as automobiles have not only the purchase cost, but the costs of fuel and insurance to consider, information technology must be understood in terms of its total cost over time -- including the damage that could be caused by failing to operate it responsibly.
About "Stay Connected"
"Stay Connected" with Roger McCoy airs on WBNS-10TV (Columbus) each Tuesday and Thursday at 5:30pm, keeping consumers informed and in touch with the changes technology brings to our lives.
About Interhack
Interhack is a Columbus-based advanced technology firm with practices in Information Assurance, Forensic Computing, and Trustworthy Computing. With clients all over North America and across a wide variety of industries, Interhack's mission is to help information technology to achieve its potential as a useful servant of humanity.