английский => русский Техника Информационные технологии

Внизу приведено требование (Requirement) стандарта безопасности данных индустрии платежных карт и пояснение (Guidance) к нему.

Requirement

2.1.1 For wireless environments connected to the cardholder data environment or transmitting cardholder data, change wireless vendor
defaults, including but not limited to default wireless encryption keys, passwords, and SNMP community strings. Ensure wireless device security settings are enabled for strong encryption technology for authentication and transmission.


Guidance

Many users install these devices without management approval and do not change default settings or configure security settings. If wireless networks are not implemented with sufficient security configurations (including changing
default settings), wireless sniffers can eavesdrop on the traffic, easily capture data and passwords, and easily enter and attack your network. In addition, the key exchange protocol for the older version of 802.11x encryption (WEP) has been broken and can render the encryption useless. Verify that firmware for devices are updated to support more secure protocols like WPA/WPA2.