Why should you care about wireless network security?
Wireless networks are “popping up” at an unprecedented rate due to recent price drops for computer networking equipment. Everyone from businesses to individuals are setting up “Wireless” because it provides easy access to your broadband Internet connection, your data and the World from anywhere in your house or office.
However, the same easy access you enjoy may be used by your neighbors and strangers to access the same data. Unlike your wired network, which someone would need to physically plug into from within your house, a wireless network can be accessed from quite a distance. “So what’s the harm in letting someone use my Internet connection?” you might ask. With an open network, you have no idea who is using your connection and what they’re using it for. Perhaps just browsing; but what if they’re downloading “pirated” music, attacking someone else’s network or worse. Such activities can often be traced back to your Internet connection and result in the “Authorities” knocking on your door for an explanation. Beyond that, even moderately experienced hackers can “listen” to the traffic on your network and grab personal data while you shop on the Web or do your banking online.
Though most wireless devices come with some type of security function, many people fail to use these tools since setup can sometimes be complex or time consuming. Instead, they focus on the goal of getting to the Web without considering the risks.
Below are some hints and tips to help you secure your network, regardless of which type of wireless device you own. There are also links to the more popular manufacturers where you can get specific step-by-step instructions for your devices.
- Do your homework- See what device is right for you. You may not even need wireless connectivity. Many people setup “Wireless” and never access it. If you already have a device with wireless capabilities and don’t need to connect wirelessly; turn this feature off.
- Change the default Administrator settings - All devices come with preset Administrator login and password information. All of this information is readily available on the Internet and devices are easy to identify from the wireless network. An attacker can use these settings to access the device to change settings or map out your network. So change the default username and password. And remember; a weak password is almost as bad as no password. Make a complex password that is at least 8 characters long and contains letters, numbers and symbols that cannot be easily guessed.
- Change the default SSID - Each wireless access point\router has a default SSID (Service Set Identifier). This is the name you see broadcast when you try and connect. For instance, many Linksys’s access points are preset to broadcast the name “Linksys”. This name should be changed so that the device is more difficult to identify. DO NOT use any personal identifying information such as your family name, address, or username for the SSID.
Better yet...
- Disable the SSID broadcast - Turn off the SSID broadcast feature. This will add one step to the setup of your wireless devices but will prevent casual connections to your network. Your network appears as hidden and becomes harder to find by a random attacker.
- Enable WEP or, better yet WPA encryption - Most wireless devices have encryption available, be it WEP (Wired Equivalent Privacy) or WPA (Wi-Fi Protected Access) and usually provide automated assistants that will walk you through the setup process. Both standards, WEP and WPA, create a “key” to access the network. WPA is certainly the preferred standard. Yet, even with its flaws, WEP makes your network much harder to access by the untrained attacker. Another advantage to WEP is that it is compatible with older wireless adapters.
- Enable MAC filtering - Every machine with a network card has a MAC (Media Access Control) address. By enabling MAC filtering, you can specify which machines have access to your network and exclude every other machine. While it is possible to “spoof” or fake a MAC address, this measure, combined with the others above will make you network very difficult to connect to without granting someone access.
- Keep your systems updated and patched - While this is not strictly a wireless security measure, should someone access your network you can make it harder for them to access your computers and systems by keeping those systems up-to-date. Both Apple and Microsoft have automatic features which can be configured to download the latest patches and updates. These updates often resolve security flaws that have been identified in the host system.
- Turn off the device when you’re away for extended periods of time - In short, if you’re away for any extended period, shut down the access. If you’re not using it, why should it be running?
- Be aware! - The key to security is awareness. Keep up with trends and information about wireless security so you can identify potential threats. Question why that suspicious person parked outside of your house and working on a laptop is there and call the authorities if you have concerns.
- Ask for help - Don’t be afraid to ask for help if you need it. There are many sources of information available and professionals who you can contact to set your network up correctly if you don’t feel capable yourself. Proper configuration isn't always easy and though manufacturers have tried to simplify it, it can be a daunting task.
More questions or need help securing your wireless network? Contact the support professionals at TechGuides for answers and solutions to your technical problems.
or call us at 610-541-6715.