Rabu, 05 Maret 2008

Wireless Network Security

Our technological world is evolving so quickly that we are finding it difficult to keep up. In the world of wireless networks, such as networks that allow employees to log into the system from their home computers, PDA’s, or laptops, security is a big issue.

These wireless networks are very susceptible to outside attacks from hackers. Hackers use wireless-enabled notebook computers and PDA’s, along with software, to hack into these systems. They especially like wireless networks because most companies do not take the necessary security precautions to protect them – and because they are wireless.

Wireless devices broadcast a signal over the airwaves. Therefore, any computer in the area, using the proper equipment, can detect the network – they can even easily become part of that network because they are using the same airwaves. Packet Sniffing, which is a very old hacker technique, can be done by anyone that is in range of a wireless network. This allows them to capture and analyze data as it travels over the airwaves – and extract the information that they want.

While this was once just an issue that corporations had to deal with, more and more home users now have wireless networks of their own – which has brought even more hackers out of the woodwork. Home computer users are notoriously less protected than the large corporations when it comes to computer security and wireless network security is no exception to this rule.

Protecting the router/access point is where wireless network security begins. Start by disabling SSID broadcast, if your router/ap allows this. This will make your network less detectable to hackers. Also, change the default SSID network name on your router/ap. Avoid using your company name, location, or any other information that would help a hacker identify you or your company.

Turn off the print and file sharing option on your computer. This is a feature that allows other people in your network to access your computer files, and share your printer. If you are using a wireless connection, such as Wi-Fi, you are actually on a network with other Wi-Fi users – which means that if you have print and file sharing capabilities turned on, they can be in your files – and in your other wireless network files as well. Make sure your firewall is enabled as well.

Don’t use default passwords. Hackers know all the default passwords for all of the major hardware brands. This gives them the access that they need to change all of your router/AP settings – which can cut off your access, as well as the access of others in your network. Change all default passwords, using a combination of letters and numbers for the new password.

Use the highest level security setting available for all of your hardware – and software. This high level of security does not guarantee protection, but it does help. You may have to change security settings to access various parts of a network, the Internet, or software, but taking those extra steps is worth the extra security that your wireless network is afforded.

Use Media Access Control (MAC). This is a software filter that will only allow access to your wireless network from MAC addresses that you specify. It isn’t foolproof, as determined hackers will try to spoof a allowable MAC address – but it will stop undetermined, or less experienced hackers.

Disable Simple Network Management Protocol (SNMP) if you don’t use it. But if you do use it, or if your router/ap won’t allow you to disable it, change the community names. Don’t use common words or names – again, use a combination of letters and numbers.

If your wireless network only has a small number of users, get a static IP address for them to use, and disable the Dynamic Host Configuration Protocol. This essentially hides your network from hackers – it’s still there, but it is harder for them to find.

Strongly consider using Virtual Private Network (VPN) software. This software will encrypt all of the network traffic from your wireless network device to the Virtual Private Network. In other words, the hackers won’t be able to pick up your trail and follow you, or extract information for analyzing.

Activate Wi-Fi Protected Access (WPA) on your network. For this, your router/ap and your operating system must support WPA, and your wireless network card should have WPA drivers. You should note that in order for WPA to be effective, all of the wireless computers and devices in your network must have WPA activated. If you are running Window’s XP, Microsoft has a free WPA upgrade available. However, if you are not running Window’s XP, you will need to purchase third party software, called a supplicant, to upgrade your operating system to WPA.

There is software called ‘NetStumbler’ that hackers use to find networks. They can download it for free – and so can you. Download it, and use your notebook computer or PDA outside of your building, or in other offices in your building, to see how detectable your network is. This will enable you to make needed changes and beef up network security. Start by moving the router/ap to the center of the building, where it is farthest away from exterior walls.

Securing the integrity of the wireless network is only one way of protecting your network. Each individual computer or device must also be protected and secure. Misplaced notebooks and PDA’s are a problem – and they pose a risk to your wireless network. Using these wireless devices in public places not only poses a risk to the network security through the airwaves – but you are also at risk of having someone peek over your shoulder. As advanced as we have all become, hackers are not above stealing information the old fashioned way – by tapping directly into a wired or wireless device.

Virus protection, firewalls, Trojan horse protection, spyware detection and removal, and strong passwords are necessary for all computers. When you are using your computer in a public place, it is important to pay attention to what is going on around you. Who is watching? When in public, never let your wireless device out of your sight. Do not loan it to other people for use – no matter how much you trust them, you don’t know how careful they will be with your device.

When you leave your wireless device at home, lock it up. Not only will you prevent anyone from stealing it, you will also prevent anyone from stealing the information that is in it. Hackers are not above breaking into a home to get the information that they want off a computer – in most cases, you will never even know that they were there. The information is often much more valuable to them than the actual device that stores the information.

Make sure that your hardware and software, including drivers, are up-to-date. You can often find upgrades through the manufacturer’s website, and you should make it a monthly habit to search for these upgrades. It could be the difference between having a secure wireless network, and a wireless network that is open to even the most inexperienced hackers.

Source: www.securitytutorial.com

Tidak ada komentar: