[Dailydave] Wireless spaces
Dave Aitel
dave at immunityinc.com
Thu Sep 20 13:12:46 EDT 2007
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Are any of the major vendors doing this?
1. Take any three wireless access points and have them each track
client wireless signal strength. (This will map to physical space almost)
2. At the same time, have them track traffic type this client is doing
and use this to generate a number of some sort.
3. Map these four things into a space and all your clients will be
divided into "rooms" that you can draw bounding boxes around (much
like Reliance HIDS did).
4. Do simple anomaly detection and you'll see a SILICA user in the
parking lot stand out like a Suicide Girl in Utah.
I think if you can tie the traffic clients generate with "where" the
clients are, you'll get an interesting picture of things in general.
You don't care in real world terms where they are, just where they are
in the mathematical space.
- -dave
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFG8qoNB8JNm+PA+iURAu1kAKDR4BJfFya+CqUFqgbNV5QCuhwH3QCglbNq
X/jcsr5cCfbZ5+1sae7g47o=
=mrwt
-----END PGP SIGNATURE-----
More information about the Dailydave
mailing list