Detection of vulnerable wireless networks

A system for detecting vulnerable wireless networks coexisting in a wireless environment of an organization, comprising:

• a processing circuitry;
• and
• a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
• receive intercepted traffic, wherein the intercepted traffic is transmitted by at least one wireless device operable in an airspace of the wireless environment, wherein the intercepted traffic is transported using at least one type of wireless protocol;
• analyze the received traffic to detect at least one active connection between a legitimate wireless device of the at least one wireless device and at least one unknown wireless device, wherein the legitimate wireless device is at least legitimately authorized to access a protected computing resource of the organization;
• and
• determine if the at least one detected active connection forms a vulnerable wireless network.

A non-transitory computer readable medium having stored thereon instructions for causing one or more processing units to execute a process for detecting vulnerable wireless networks coexisting in a wireless environment of an organization, the process comprising:

• receiving intercepted traffic, wherein the intercepted traffic is transmitted by at least one wireless device operable in an airspace of the wireless environment, wherein the intercepted traffic is transported using at least one type of wireless protocol;
• analyzing the received traffic to detect at least one active connection between a legitimate wireless device of the at least one wireless device and at least one unknown wireless device, wherein the legitimate wireless device is at least legitimately authorized to access a protected computing resource of the organization;
• and
• determining if the at least one detected active connection forms a vulnerable wireless network.