Wireless networks
are being used increasingly, both in the workplace and at
home.
While they bring
freedom from lots of wires running around the house, it can
also bring the home user problems from a security point of
view.
Most wireless network devices by default, come with their
security encryption turned off. This is usally done by the
manufacturer, so that it's very easy to get their product
up and running. The download of this it that the end user,
doesn't then go the next step and look into turning on the
encryption.
Basically, there are two types of encryption, WEP and WPA.
WEP can come in
64/128 bits modes and is better than no encryption but certainly
not as secure as WPA.
The next item to look at is SSID (service set identifier)
and SSID broadcasting
SSID is a configurable
identification that allows clients to communicate to the appropriate
wireless access point (WAP). For example, on a LinkSys access
point this is usually called LinkSys.
Although some people disable the SSID boardcast, it cannot
be considered a valid security tool.
Change your SSID (Service Set Identifier) to something non-descriptive
You do not want to give out your name, address, or any other
useful information to potential hackers. Also, using the default
SSID is a bad idea. A good example would be anything non-descriptive
like "flower" or "napkin" and a bad example
would be "235 Elm St." or "Johnson Family".
Change the default password(s) on your access points: The
default passwords of most network equipment are well known
and could allow an intruder to gain access to your access
point(s).
Disallow router / AP administration via wireless: This
feature is usually only present in "Enterprise-grade"
AP's, and shuts off the ability to administer your Access
Point from wireless clients. But if your router/AP has it,
use it.
Enable MAC based
filtering: Using this feature, only your unique wireless cards
can communicate with your access point.
Description: AirSnare
monitors network traffic for unfriendly MAC addresses and alerts
you when a MAC address is found that isn't on the friendly list.
AirSnare also monitor DHCP requests from clients.
Description: NetStumbler
is a tool for Windows that allows you to detect Wireless Local
Area Networks (WLANs) using 802.11b, 802.11a and 802.11g. It
has many uses:
# Verify that your network is set up the way you intended.
# Find locations with poor coverage in your WLAN.
# Detect other networks that may be causing interference on
your network.
# Detect unauthorized "rogue" access points in your
workplace.
# Help aim directional antennas for long-haul WLAN links.
# Use it recreationally for WarDriving.