SIMREX DataMover ESS, Руководство пользователя

Страница: 23 / 188

SIMREX MAN.ESS-01, Rev. F DataMover ESS User’s Guide 15
SIMREX Corporation
The transceiver is capable of dealing with many common security
issues.
Table 1-3 profiles security risks and how the transceiver provides
a solution for minimizing vulnerability.
Table 1-3. Security Risk Management
Security Vulnerability SIMREX Cyber Security Solution
Unauthorized access to the backbone
network through a foreign remote radio
•
802.1x RADIUS authentication
•
Approved Remotes List (local)
Only those remotes included in the
AP list will associate
“Rogue” AP, where a foreign AP takes
control of some or all remote radios and
thus remote devices
•
802.1x RADIUS authentication
•
Approved AP List
A remote will only associate to those
AP included in its local authorized
list of AP
Dictionary attacks, where a hacker runs a
program that sequentially tries to break a
password.
•
Failed-login lockdown
After 3 tries, the transceiver ignores
login requests for 5 minutes. Critical
event reports (traps) are generated
as well.
Denial of service, where Remote radios
could be reconfigured with bad
parameters bringing the network down.
•
Remote login with SSH or HTTPS
•
Local console login
•
Disabled HTTP & Telnet to allow
only local management services
Airsnort and other war-driving hackers in
parking lots, etc.
•
900 MHz operation is not
interoperable with standard 802.11b
wireless cards
•
The transceiver cannot be put in a
promiscuous mode
•
Proprietary data framing
Eavesdropping, intercepting messages
•
AES-128 encryption (ESS-II)
•
RC4-128 encryption (ESS)
Key cracking software
•
Automatic Rotating Key algorithm
Replaying messages
•
Automatic Rotating Key algorithm