Montreal region War drive march 2008

by maleger | March 30, 2008 at 12:55 pm | 290 views | 1 comment

On Saturday, March 29th, 2008 from 9:00a.m. To 12:00 noon, students from the Champlain College's (Saint-Lambert) Wireless Networking program under the supervision of their professor, performed a wireless network security audit in the streets of the South Shore of Montreal, Quebec, Canada as an educational activity. This article presents an overview of what was done and a summary of the results. The full results are available here:

http://www.leger.ca/pages/CHAMPLAIN/w08_audit_results.htm

During the war drive a total of 8488 devices where found, which is the sample used for the rest of this article (n=8488).

Item	W08 results		A08 results		W07 results
Item	numeric	%	numeric	%	numeric	%
Sample	8488	100	14906	100	330	100
Encryption OFF	1925	22.7	3618	24.3	103	31.2
Encryption ON	6563	77.3	11288	75.7	227	68.8
Configured as Access Points	8424	99.3	14702	98.6	328	99.4
Peer-to-peer	64	0.7	198	1.3	2	0.6
Using default SSID	461	5.4	283	1.9	10	3.0
Default + unencrypted	283	3.3
Channel 1	941	11.1	1716	11.5	33	10.0
Channel 2	101	1.2	180	1.2	8	2.4
Channel 3	134	1.6	257	1.7	2	0.6
Channel 4	323	3.8	369	2.5	3	0.9
Channel 5	85	1.0	147	1.0	4	1.2
Channel 6	4353	51.3	7406	49.7	178	53.9
Channel 7	84	1.0	172	1.2	4	1.2
Channel 8	163	1.9	272	1.8	3	0.9
Channel 9	183	2.2	295	2.0	5	1.5
Channel 10	176	2.1	332	2.2	5	1.5
Channel 11	1948	23.0	3852	25.8	85	25.8

Table 1: summary of results

There are many apparent similarities in all measures. Of the devices included in the sample, 22.7% where unencrypted. This is moderately better that the 24% identified in the previous exercise and much better than the 31% from the previous year. This shows an improvement from the previous year.

As in the previous exercise, the potential problem of the close proximity of multiple wireless devices using the same frequency and the same channel (6 and 11) was found. There must be performance problems experienced by the users of the devices, however, this was outside the scope of the project as the students did not have access to the tools required to evaluate this. Other channels used are 36 (1 AP), 52 (4 APs) and 64 (1 AP). This is possibly in an ill-advised attempt to implement some security.

Conclusion

Compared to previous years the data is good news as it shows some improvement in the level of risk and the wireless network security.

Looking at the results it seems that wireless security in networks is still not too good but it is marginally improvng. While the results may not be as catastrophic as the previous exercise indicated, it is still far from being an ideal situation in the current economic and geopolitical context. This would again support beliefs that on-going and continuous IT security awareness campaign is needed, as only through education can durable social change can be enacted.