248 – SSID without dictionary words

Summary

The name of the wireless SSID must not contain dictionary words.

Description

If an organization is using common dictionary words in the SSID makes it easier for attackers to predict and potentially guess the name of the wireless network. Attackers use automated tools that can systematically try common words to discover the network name. Avoiding dictionary words in the SSID contributes to enhance network anonymity.

Supported In

Advanced: True

References

• CAPEC-613. WiFi SSID tracking
• PADSS-6_1. The wireless technology must be implemented securely
• IEC62443-UC-2_2. Wireless use control
• OSSTMM3-9_5_3. Evaluate configuration, authentication and encryption of wireless networks
• ISSAF-L_4_3. Network security - WLAN security (audit and review)
• PTES-6_7_6_2. Exploitation - Proximity access (attacking the user)

Last updated

2024/01/18