GE MDS iNET Series, Справочное руководство

Страница: 23 / 173

05-2806A01, Rev. L MDS iNET Series Reference Manual 11
1.5 Cyber Security
Today the operation and management of an enterprise is becoming increasing dependent on electronic infor-
mation flow. An accompanying concern becomes the cyber security of the communication infrastructure
and the security of the data itself.
The transceiver is capable of dealing with many common security issues. Table 1-3 profiles security risks
and how the transceiver provides a solution for minimizing vulnerability.
Table 1-3. Security Risk Management
Security Vulnerability GE MDS Cyber Security Solution
Unauthorized access to the backbone
network through a foreign remote radio • 802.1X authentication
• Approved Remotes List (local)
Only those remotes included in the
AP list will associate
“Rogue” AP, where a foreign AP takes
control of some or all remote radios and
thus remote devices • 802.1X authentication
• Approved AP List
A remote will only associate to those
APs included in its local authorized
list of APs
Dictionary attacks, where a hacker runs a
program that sequentially tries to break a
password. • Failed-login lockdown
After 3 tries, the transceiver ignores
login requests for 5 minutes. Critical
event reports (traps) are generated
as well.
Denial of service, where Remote radios
could be reconfigured with bad
parameters bringing the network down. • Remote login with SSH or HTTPS
• Local console login
• Disabled HTTP & Telnet to allow
only local management services
Airsnort and other war-driving hackers in
parking lots, etc. • 900 MHz operation is not
interoperable with standard 802.11b
wireless cards
• The transceiver cannot be put in a
promiscuous mode
• Proprietary data framing
Eavesdropping, intercepting messages • AES-128 encryption (iNET-II)
• RC4-128 encryption (iNET)
Key cracking software • Automatic Rotating Key algorithm
Replaying messages • Automatic Rotating Key algorithm