Rogue Access Point
What is Rogue Access Point?
An unauthorized wireless access point installed on a network that can enable unauthorized network access or serve as a launch point for attacks.
Terms that appear alongside rogue access point
Each of these is named in at least one of the same controls as rogue access point. The number is how many controls name both.
- access point 3 shared controls
- encryption 2 shared controls
- authentication 2 shared controls
Frameworks that govern rogue access point
What the standards actually require on rogue access point
Requirements naming rogue access point across 5 standards, quoted from the control text.
WEP and WPA and the other pre-802.11i algorithms do not meet FIPS 140 and may not be used; for every agency-managed access point on a network carrying unencrypted CJI the agency tests for rogue access points, inventories all APs and 802.11 devices, secures APs...
fbi-cjis-security-policy::5.20.1.1 · 5.20.1.1 802.11 Wireless Protocols →Wireless access points are physically secured and configured to give the same control as a wired connection, installation of access points and gateways is prohibited without approval and inventory, network monitoring or network access control detects or blocks...
ffiec-it-examination-handbook::IS-II.C.9(a) · II.C.9(a) Wireless Network Considerations (Information Security) →Networks are logically separated so no link carries traffic its hosts cannot service: network management authenticates all users and encrypts management traffic; no single failure causes denial of service;
gli-33-gaming-laboratories-international-event-wagering-systems::B.4.6 · B.4.6 Network Security Management →The entity keeps an up-to-date inventory of the wireless access points it has authorized, and each entry carries a documented business justification. Guidance (purpose): the inventory helps administrators respond quickly when rogue devices are detected.
11.2.2 · 11.2.2 Inventory of authorized wireless access points →The handbook's Unix template, following the SANS Linux cheat sheet: examine processes (ps, lsof by PID and processes using unlinked files, attention to UID 0); search for files with root set-user-ID permissions, very large files and files with no owner;
sans-incident-handlers-handbook-and-picerl-methodology::I-4 · I-4 Check Unix hosts for root processes, unlinked files, SUID and large files, promiscuous interfaces, cron jobs, UID 0 accounts and logs →Questions people ask about rogue access point
What is Rogue Access Point?
Why is Rogue Access Point important for compliance?
Which compliance frameworks address Rogue Access Point?
Where can I learn more about Rogue Access Point?
See how Rogue Access Point applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.