P.K. SHARMA

Cyber security intelligence, AI governance, practitioner analysis

Wireless and radio

Wireless monitoring sensor (WIDS): what it is and how it is attacked

Equipment that listens to the airwaves and reports transmitters that should not be there.

Also known as

  • WIDS
  • WIPS
  • wireless intrusion detection
  • air monitor

Typing any of them into the editor finds this object.

Why it matters on a security diagram

It is the only object on a wireless diagram that would notice an added or a copied transmitter. A diagram showing a wireless attack with no sensor on it is also showing why nobody saw it.

How it gets attacked, and what reduces it

How it gets attacked

  • Deployed to satisfy an audit and then left with nobody reading the alerts
  • Coverage that follows where access points were convenient rather than where the boundary is
  • Everything unfamiliar suppressed to quieten the noise from neighbouring tenants

What reduces it

  • Write the response before the first alert arrives, because an unread alert is an absent control
  • Map monitoring against the boundary, not against the office
  • Tune the noise; do not suppress the category

Where it sits

Group
Wireless and radio · The parts of the network that travel through the air, and how far they reach.
Whose side, by default
Ours · Belongs to the organisation the diagram is about.
Catalogue identifier
wireless-monitor

Reviewed . CC BY 4.0.

Others in wireless and radio

The wireless and radio group lists all 11 of them side by side.

Wireless monitoring sensor on your own diagram

Open the editor, press N, and type WIDS. The object is placed and connected to whatever was selected, and Tab adds the next one already joined to it. Nothing is uploaded: the page is served with a Content Security Policy that forbids the browser from making any outbound request at all.

Open the diagram maker