All the latest UK technology news, reviews and analysis


Security researchers warn of airborne WiFi virus that spreads like a cold

27 Feb 2014
wifi1

Security researchers at the University of Liverpool have warned of the potential for computer viruses to spread over WiFi networks with the same effectiveness as the common cold.

The team in the University’s School of Electrical Engineering, Electronics and Computer Science developed a virus called Chameleon, which is able to move across WiFi networks and avoid detection with ease.

"This attack replaces the firmware of an existing AP [access point] and masquerades the outward-facing credentials. Thus, all visible and physical attributes are copied and there is no significant change in traffic volume or location information," it said.

"Hence, this attack is considered advanced and difficult to detect, as IDS [intrusion detection system] rogue AP detection methods typically rely on a change in credentials, location or traffic levels."

The researchers then ran tests on a simulation of the WiFi networks in London and Belfast and found that Chameleon acted like an airborne virus, as the close proximity of WiFi APs made it easy for the virus to spread.

The virus also easily adapted to its surroundings. If it encountered an AP with good security encryption and passwords, it would move onto another AP that was not sufficiently protected and continue to spread.

Alan Marshall, professor of network security at the university, said the study underlined the risks posed by public WiFi.

“WiFi connections are increasingly a target for computer hackers because of well-documented security vulnerabilities, which make it difficult to detect and defend against a virus,” he said.

“It was assumed, however, that it wasn’t possible to develop a virus that could attack WiFi networks, but we demonstrated that this is possible and that it can spread quickly. We are now able to use the data generated from this study to develop a new technique to identify when an attack is likely.”

The full research paper entitled Detection and analysis of the Chameleon WiFi access point virus is available online.

The research is worrying as public WiFi networks are being rolled out across major cities such as London all the time. The London Underground now has more than 130 stations hooked up while numerous boroughs are offering free services to residents.

  • Comment  
  • Tweet  
  • Google plus  
  • Facebook  
  • LinkedIn  
  • Stumble Upon  
Dan Worth
About

Dan Worth is the news editor for V3 having first joined the site as a reporter in November 2009. He specialises in a raft of areas including fixed and mobile telecoms, data protection, social media and government IT. Before joining V3 Dan covered communications technology, data handling and resilience in the emergency services sector on the BAPCO Journal

View Dan's Google+ profile

More on Networks
What do you think?
blog comments powered by Disqus
Poll

IT curriculum poll

With coding now compulsory in schools, how important are digital skills for the next generation of school leavers?
66%
9%
17%
8%

Popular Threads

Powered by Disqus
V3 Security Summit

V3 Security Summit Day 2: Botnet, skills and BYOD intelligence incoming

Keep V3 bookmarked for news updates on all the key security concerns and topics facing businesses

Updating your subscription status Loading
Newsletters

Get the latest news (daily or weekly) direct to your inbox with V3 newsletters.

newsletter sign-up button
hpv3may

Getting started with virtualisation

Virtualisation can help you reduce costs, improve application availability, and simplify IT
management. However, getting started can be challenging

ibmv3may

Converting big data and analytics insights into results

Successful leaders are infusing analytics throughout their organisations to drive smarter decisions, enable faster actions and optimise outcomes

Project Manager / Broadcast - Media

Project Manager / Broadcast - Media A global Broadcast...

Mechanical Design Engineer - Creo

Mechanical Design Engineer - Contract (CREO, ProE, Pro...

E-Commerce Developer – C# ASP.NET MVC Agile

A C# ASP.NET developer is required by an e-commerce company...

SEN Team Leader South Coast - Local Government

SEN Team Leader South Coast – Local Government Skills...
To send to more than one email address, simply separate each address with a comma.