Analysts at AirDefense, a wireless monitoring company, ran a scan on wireless devices at the conference Tuesday at the Moscone Center in San Francisco. Of the 347 laptops, smartphones, and hand-held devices they monitored between 9:30 a.m. and 5 p.m., 56% of them weren't secure.
Last year at the RSA conference, AirDefense found that 35% of wireless devices were insecure. But not as many people had wireless devices at the show with them. This year, says Rushing, there are more computers at the show with wireless capabilities, and more of them are at risk.
"It's a little surprising the percentage is actually that high," says Rushing, who is attending the conference "It just shows that there's a huge prevalence of wireless devices, and [people] aren't aware that they're putting themselves at risk."
A hacker could set up a rogue access point and send off a signal pretending to be a legitimate wireless access point. A laptop is set to run through its list of access points every 30 to 90 seconds, depending on its settings. If it comes across a stronger connection, it will simply pick it up. If that's a rogue connection, then the hacker has access to everything that's passing through it.
"It's all about manipulation," says Rushing. "With that connection you made, you're already doomed. You're setting yourself up for trouble. Most people leave the hotel, but that hotel is still in their machines' inner policy. So when they go to the show, they should turn off their wireless or change their policy to remove any access points they're not currently using. If you connect at Starbucks, when you leave, you should hit disconnect instead of just closing the browser."
Rushing adds that hackers know a lot of people aren't aware of the issue, which leaves them at risk. For hackers, this is just "low hanging fruit," he warns, adding that IT managers need to educate their road worriers as soon as they get back in the office.
Stay connected and informed by visiting the CA Solutions Center Community!

Become a member today for instant access to free InformationWeek research, expert advice, peer perspectives, and more on the following topics:
- Application Performance Management (APM)
- Security Management
- Mainframe 2.0
- IT Automation
- Service Assurance
Also, visit our Government and Financial Services groups to see how these technologies apply specifically to those industries.
NOTE: Offer valid for U.S., U.S. possessions, & Canada only.