From: InfoSec News (alertsinfosecnews.org)
Date: Wed Apr 22 2009 - 02:46:49 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Forwarded from: "Prabhu, Keith (IN - Mumbai)" <kprabhu (at) deloitte.com>

April 14, 2009

Enterprise Risk Services Division of Deloitte Touche Tohmatsu India
Private Limited (Deloitte) conducted a wireless security survey in the
month of October and November across 12 Indian cities. Today, Deloitte
released the results of this survey titled, "Wireless Security Survey"
along with DSCI. NASSCOM established Data Security Council of India
(DSCI) as a self-regulatory organization (SRO). DSCI has an independent
Board of Directors, guided by a Steering Committee with members drawn
from leading IT and BPO companies, and from the best IT products
companies of the world.

The survey was aimed at assessing the use of security precautions and
best practices in wireless environments across the country.

The key findings of the survey of the 35860 wireless networks seen are:

* 37% appeared to be unprotected i.e. without any encryption.

* 49% were using low level of protection i.e. Wired Equivalent Privacy
  (WEP) encryption.

* Balance 14% were using the more secure Wi-Fi Protected Access
  (WPA/WPA2).

* This makes around 86% of the observed wireless networks vulnerable.

The 12 cities surveyed were categorized into Group I and Group II cities
based on size:

Group I - Bengaluru, Chennai, Hyderabad, Kolkata, Mumbai*, National-Capital Region (NCR)**.
Group II - Ahemdabad, Indore, Jaipur, Lucknow, Nagpur, Pune.

* Includes Navi Mumbai
** Includes Gurgaon and Noida regions.

The survey points out that the major risks that one might be exposed to
including, unauthorized access to objectionable or banned sites, access
to post objectionable material on websites, send threatening emails,
extract bank account details causing monetary losses etc. This survey
also provides guidelines for protecting wireless networks from
unauthorized elements. The survey can be downloaded from
http://www.bcm-india.org/wifi_india.html.

If you need more information about the survey or need a printed copy
please reach out on ersindia (at) deloitte.com The survey has to be read
along with disclaimer mentioned on the last page of the survey.

Regards,

Keith Prabhu
Manager
Deloitte Touche Tohmatsu India Private Limited,
Direct: +91 22 6681 0715
Main: +91 22 6681 0500
Mobile: +91 98190 63 222
kprabhu (at) deloitte.com

Deloitte Touche Tohmatsu India Private Limited
3rd Floor, NASEOH Building,
Postal Colony,
Chembur, Mumbai - 400071.

--
LayerOne 2009, Information Security for the discerning professional.
May 23-24 2009 The Anaheim Marriott in Anaheim, California
Visit http://layerone.info for more information

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]