BACKGROUND

The present disclosure applies to discovery of access points, specifically networking hardware devices that allow Wi-Fi enabled devices to connect to a wired network. Wireless scanning, for example, can be an element of penetration testing in an area that may include one or more access points. Conventional wireless scanning techniques can tend to be manual. As a result, conventional wireless scanning techniques can include time-consuming and resource-consuming actions used to assess where wireless networks are visible and whether the wireless networks can be exploited.

In some cases, wireless testing techniques can include a time-consuming process called “war driving” in which a tester investigates a target site or target area by walking or driving around with an active wireless sensor. War driving processes can be used, for example, as a way to identify rogue networks and misconfigured corporate networks. While war driving techniques can provide a snapshot of detected access points at a particular time, the manual efforts associated with war driving techniques can limit the frequency and effectiveness of such processes. For example, gaps in time between tests can miss access points (for example, networks) that are not active at the precise time of a given test.

An organization's ability to perform security testing on wireless components connected to the organization's information technology (IT) estate is crucial. However, the ability to perform comprehensive wireless testing of all sites within a large geographic area can incur significant resource (for example, manpower) use.

SUMMARY

The present disclosure describes techniques that can be used for discovering access points. For example, an autonomous system can be used to determine locations and types of access points, particularly access points that are rogue, insecure, or otherwise undesirable. Detection can include, for example, detecting insecure wireless fidelity (WiFi) devices and WiFi hotspots; detecting traffic on specific radio frequency (RF) frequencies; and detecting rogue cell tower deployments. Information regarding detected access points can be provided in real-time to a central repository or downloaded when the mobile vehicle carrying the system returns to base. For example, the term real-time can correspond to events, including detected access points, that occur within a specified period of time, such as within seconds, minutes, or hours.

In some implementations, a computer-implemented method can be used for detecting and identifying access points. Signals transmitted by access points in one or more mobile telecommunications networks within range of a mobile wireless scanning system are received by the mobile wireless scanning system. A presence of the access points is detected by the mobile wireless scanning system. Locations of the access points are determined by the mobile wireless scanning system using the signals transmitted by the access points. The locations of the access points are logged by the mobile wireless scanning system. Location and identifying information for the access points are provided by the mobile wireless scanning system to a receiving client.

Signals transmitted by access points in one or more mobile telecommunications networks within range of a mobile wireless scanning system are received by the mobile wireless scanning system. A presence of the access points is detected by the mobile wireless scanning system. Locations of the access points are determined by the mobile wireless scanning system using the signals transmitted by the access points. The locations of the access points are logged by the mobile wireless scanning system. Location and identifying information for the access points are provided by the mobile wireless scanning system to a receiving client.

The previously described implementation is implementable using a computer-implemented method; a non-transitory, computer-readable medium storing computer-readable instructions to perform the computer-implemented method; and a computer-implemented system including a computer memory interoperably coupled with a hardware processor configured to perform the computer-implemented method/the instructions stored on the non-transitory, computer-readable medium.

The subject matter described in this specification can be implemented in particular implementations, so as to realize one or more of the following advantages. First, vehicular integration of enterprise wireless scanning can eliminate the manual overhead of testing across an entire campus, without requiring additional manpower resources. Second, vehicular integration of enterprise wireless scanning can provide the ability to extend the frequency of such testing. Third, testing of remote locations can be accomplished even when it is difficult to deploy technical personnel. Fourth, vehicular integration of enterprise wireless scanning can be scaled to include an entire geographical coverage of a given organization. Fifth, testing speed of a network area can be increased using pre-configuration of scanning and reporting (for example, of detected access points). Sixth, vehicular integration of enterprise wireless scanning can provide a more efficient and repeatable mechanism for ensuring the security of a corporate wireless estate. Seventh, the hardware of the enterprise wireless scanning system can be replicated in a reliable and cost-effective way, ensuring consistent hardware specifications to minimize deployment of alternate drivers and operating system components. Eighth, the base operating system can be replicated. Ninth, the hardware can be operated at extreme temperatures that may occur in an operational region.

The details of one or more implementations of the subject matter of this specification are set forth in the Detailed Description, the accompanying drawings, and the claims. Other features, aspects, and advantages of the subject matter will become apparent from the Detailed Description, the claims, and the accompanying drawings.

