Project 3 - WI-FI Security

The articles, 10 Tips for Wireless Home Security and Exploiting and Protecting 802.11b Wireless Networks are very similar. Both articles demonstrate how one should configure the security settings on home access points to prevent or at least deter would be hackers. The most common theme in both of the articles is that wireless routers straight out of the box are vulnerable and that WEP is not secure. They both go on to list how to secure a network however they use different approaches.

The Exploiting and Protecting 802.11b Wireless Networks article started out with an in-depth summary of how a team of investigators went around various cities to find open networks. They found that an average of 39% had WEP enabled. What was most interesting to me is that this article basically taught people not only how to secure their networks, but also how to hack into networks. Detailed instructions, pictures and pricing regarding equipment and applications needed to break into a WI-FI network were also outlined. For example, they mention AirSnort a program recently developed that can “snort” a WEP key after monitoring a network for a short time. This information is useful knowledge for those who need to think like hackers in order to find weak spots on their own networks.

In contrast, the 10 Tips for Wireless Home Security, article provided straight-forward strategies on how to protect a wireless network. The tips listed were very helpful. I immediately checked my own network following the instructions provided. I was very anxious to see how my own network security settings compared. I did not set up the network in my own home; my son actually installed and configured it. I was pleasantly surprised and glad to know that he changed the default SSID (as both articles recommend) and he enabled WPA2 with AES encryption. According to the article, this is a newer version of WEP and much more secure.

Both of the articles stressed the need to change the SSID from the manufacturers default. Additionally the default password should always be changed to a non-word alphanumeric value. Also, WEP should be enabled if there is no other option.  As the authors of the Exploiting and Protecting 802.11b Wireless Networks pointed out, “WEP isn’t secure…but at least it’s a first barrier. However this article made no mention of WPA or WPA2. They both also recommend disabling the SSID Broadcast and placing the router towards the center of the building away from windows.

After reading and researching the terms and jargon of these two articles, I feel much more confident with my knowledge of wireless networks. Some of the terms that were new to me were “802.11b network” and WEP. I have since learned that 802.11b-n describes a set of standards/protocols for wireless transmission. WEP on the other hand, is Wired Equivalent Privacy.  Using my new knowledge, I have noticed that there are quite a few open networks in my neighborhood. Perhaps people need to take the time to learn about these technologies before they begin to use it.