GE MDS iNET 900, Reference Manual

Page: 26 / 188

16 iNET Series Reference Manual 05-2806A01, Rev. J
The transceiver is capable of dealing with many common security
issues. Table 1-3 profiles security risks and how the transceiver pro-
vides a solution for minimizing vulnerability.
Table 1-3. Security Risk Management
Security Vulnerability GE MDS Cyber Security Solution
Unauthorized access to the backbone
network through a foreign remote radio
•
802.1x authentication
•
Approved Remotes List (local)
Only those remotes included in the
AP list will associate
“Rogue” AP, where a foreign AP takes
control of some or all remote radios and
thus remote devices
•
802.1x authentication
•
Approved AP List
A remote will only associate to those
AP included in its local authorized
list of AP
Dictionary attacks, where a hacker runs a
program that sequentially tries to break a
password.
•
Failed-login lockdown
After 3 tries, the transceiver ignores
login requests for 5 minutes. Critical
event reports (traps) are generated
as well.
Denial of service, where Remote radios
could be reconfigured with bad
parameters bringing the network down.
•
Remote login with SSH or HTTPS
•
Local console login
•
Disabled HTTP & Telnet to allow
only local management services
Airsnort and other war-driving hackers in
parking lots, etc.
•
900 MHz operation is not
interoperable with standard 802.11b
wireless cards
•
The transceiver cannot be put in a
promiscuous mode
•
Proprietary data framing
Eavesdropping, intercepting messages
•
AES-128 encryption (iNET-II)
•
RC4-128 encryption (iNET)
Key cracking software
•
Automatic Rotating Key algorithm
Replaying messages
•
Automatic Rotating Key algorithm