AirMagnet PRG-Laptop 7.0, Reference Manual, Page: 70 / 210

62 Chapter 3: IDS—Security Penetration
AirMagnet Laptop Wireless LAN Policy Reference Guide
• Legitimate wireless client attempting risky promiscuous
association.
Figure 3-4: War-chalker publishes a discovered WLAN and its
configuration at the WLAN location with these universal symbols.
The first potential security threat as indicated by this AirMagnet
Mobile alarm is the presence of WLAN war-driving, war-chalking,
war-walking, and war-flying activities with tools mentioned above.
A wireless hacker uses war-driving tools to discover APs and publish
their information (MAC address, SSID, security implemented, etc.)
on the Internet with the APs' geographical location information.War-
chalkers discover WLAN APs and mark the WLAN configuration at
public locations with universal symbols as illustrated above. You can
think of war-walking as war-driving, but the hacker is on foot instead
of a car. War-flying is just as the name implies, sniffing for wireless
networks from the air. The same equipment is used, but from a low
flying private plane with high power antennas. It has been reported
that a Perth, Australia-based war-flier picked up e-mail and Internet
Relay Chat sessions from an altitude of 1,500 feet on a war-flying trip.
Laptop Wireless LAN Policy Reference Guide.book Page 62 Thursday, January 25, 2007 5:36 PM