
Keeping your wireless network safe
|
Observer Reporter Sunday, April 17, 2005
|
You can implement as much or as little security as you want to on your wireless network, but at an absolute minimum you should enable WEP - even with it's vulnerabilities.
WEP is only a low barrier to entry, but it will keep out many of the casual hackers because there are so many other wireless networks that are wide open and easier targets. Here are some other tips: . Change the default SSID of your product.
Networks that still use the manufacturer's default SSID (Service Set IDentifier) and do not even bother to change the default password are vulnerable to hackers.
The SSID is a token which identifies an 802.11 (Wi-Fi) network. The SSID is a secret key which is set by the network administrator. You must know the SSID to join an 802.11 network. However, the SSID can be discovered by network sniffing. By default, the SSID is part of the packet header for every packet sent over the wireless land area network (WLAN).
. Don't change the SSID to reflect your company's main names, divisions, or products.
This just makes you too easy to target. If your naming is enticing enough, it may attract hackers who are willing to put in the additional effort to break your WEP encryption keys.
. Don't change the SSID to your street address as this will make it easier to zero in on your location.
. If your access point supports it, disable "broadcast SSID". By disabling that feature, the SSID configured in the client must match the SSID of the access point.
. Change the default password on your access point or wireless router.
Any hacker worth his salt knows the manufacturers' default passwords, and will try them first. Since popular programmes identify the manufacturer based on the MAC address, it doesn't take much work to figure out what type of device it is, even if you do change the SSID.
. Location, location, location. As you do your site survey for access point deployment, think about locating the access points toward the center of your building rather than near the windows. Plan your coverage to radiate out to the windows, but not beyond.
If the access points are located near the windows, a stronger signal will be radiated outside your building, making it easier for people to find you.
. Do regular checks. Network administrators should periodically survey their sites to see if any "rogue" access points pop up.
. See what they can see. Take a notebook and an external antenna outside your office building and survey what someone parked in your parking lot might "see". You'll be surprised how far the signal radiates. . Know the jargon.
Wi-Fi (802.11) is a suite of specifications for wireless Ethernet. Wired Equivalent Privacy (WEP) is the encryption algorithm built into the 802.11 (Wi-Fi) standard.
|
|
| Related Articles |
| No
related articles were found |
| |
|
|
|