Perth might just have some of the best WiFi security in the country – so far – but security experts from Sophos say they hope to see the trend continue across Australia’s other major cities.
Security experts Chet Wisniewski and John Shier have conducted a two-day ‘warbiking’ exercise across the city.
They rode their computer-equipped bicycles with a mission: to expose unsecure wireless networks and dangerous user behaviours that hackers could exploit.
The bikes were equipped with passive scanning technology consisting of Raspberry Pis, external WiFi antennae, GPS antennae, a solar panel and some external batteries.
They found that out of the 7238 access points the pair surveyed, 94% of operators were operating WPA or WPA2 security protocols.
68% were using WPA2 security protocols, less than 2% were using WPA, less than 1% were using WEP and only 6% were using no security protocols at all.
They found that about 300 laptops, cars (including Ford and Audi), printers, PlayStations, ChromeCasts, Sonos, GoPros and other devices with ad-hoc networking enabled.
Organisations are also segmenting their WiFi networks for specific purposes such as corporate, guests and IoT.
There were also more than 125 manufacturers of APs across the city, which the Sophos experts say demonstrates diversity and inherent security against the same attack.
“Over the course of a couple of hours, we found over 70,000 data points each in Perth – that tells you the ubiquity of wireless in our major cities today,” Shier says.
“Individuals want to be connected at all times, but it is critical to understand the risks that come with connecting to unsecure networks, not to mention what can be hacked by outsiders.”
Wisniewski adds that Perth seems to have some of the best security in any city Sophos has surveyed.
“In Perth, 6 per cent of APs were left unencrypted, this is down from between 14 per cent and 28 per cent in other cities we’ve measured in the past, suggesting that we have largely eliminated networks that are open by mistake. Whilst WiFi encryption is only one part of online safety, it’s good to see the city taking it seriously – a trend we hope to see across our other major cities including Sydney, Melbourne, and Canberra,” he says.
We recently conducted an interview with Sophos A/NZ general manager Ashley Wearne to find out how it uses deep learning neural networks to boost security via artificial intelligence and machine learning. Read it here.