🗺️ Carte mentale

Carte mentale

41 nœuds

100 %

Wi-Fi Security

Unpatched firmware and insecure defaults

Shared networks; insufficient segmentation

IoT devices with poor security or missing updates

Wardriving, parking-lot attacks, and device theft

Rogue APs, weak authentication, and weak encryption

2015: ANTLabs InnGate vulnerability affected 277 organizations

2015: WeWork shared PSKs exposed sensitive documents

2021: 1.51 billion IoT breaches reported, up from 639 million in 2020

Eduroam EAP misconfiguration enabled Evil Twin credential theft

Legal implications; seek legal advice

Additional technical support for controls and users

Availability: high availability, disaster recovery, and wired alternatives

Wireless signals remain subject to jamming

Cyber Centre publication for organizations of all sizes using Wi-Fi

Effective March 31, 2022; revision 1, first release

Apply least privilege and limit sensitive data on open networks

Classify data: public, internal-only, confidential

Separate SSIDs, VLANs, wired and wireless zones

Limit guest-password duration

Acceptable use and BYOD

Encryption, data security, governance, and password policies

Patching and public Wi-Fi policies

Prefer WPA3 for new deployments; avoid WEP, WPA1, and WPS

Prefer EAP over shared PSKs for organizations

Use separate SSIDs and VLANs; enable client isolation

Secure RADIUS, directories, endpoints, and physical infrastructure

Use corporate VPNs on unmanaged networks; avoid public VPNs for business

Use WIDS/WIPS to detect and possibly mitigate RF attacks

Teach network identification, permitted use, connection, and incident reporting

Cover device security, public Wi-Fi, VPNs, and signs of compromise