Wednesday 19 September 2007

11 Tips to Secure Your Wireless Network

Wireless network offers flexibility, and at the same time, it offers good security, if you configure its security setting correctly. Applying the following 11 tips will help improved your wireless network security in no time in addition to any measures you have take.


1. Change Default Administrator Password
Your wireless router manufacturer has created a default password for router management software, which are well known to the hackers community. In fact, anybody including you, can find it, effortlessly, by googling the Internet. For example, when I search for the following phrase, "linksys wireless router default password", I found it, with one hit. If you leave it unchanged, everybody will knew it. If you change it, you own it.

2. Change The Default SSID
SSID is the name given to your access point or router. Manufacturer gave the default SSID to it, is a well known information among hackers community. For example, Linksys devices, named "linksys". If you hide it - disable SSID broadcast, hackers will try it. If they found it, they will start to hack it. By changing it, you secure it.

3. Disable SSID Broadcast
Most access point or router broadcast SSID by default, meaning, it will introduce itself, and invite everybody - you and the stranger, to use it. This feature allows your neighbors and hackers to discover it easily. This feature is not for you - the home user, rather, it is for mobile hotspots where Wi-Fi clients will roam in and out of range, such as at Starbucks, McDonalds and Airports. Disabled it- hiding the name you gave in step 2 is not an option.

4, Turn On WPA Encryption On 802.11g
802.11g wireless network support both Wireless Equivalent Privacy(WEP) and Wi-Fi Protected Access (WPA). The WEP using a static key for authentication and data encryption through out a session. This allow people with a proper tools, such as WEPCrack, to collect enough data from you session, analyze it, and crack you shared key, often within minutes, or in worst cases, within hours. WPA uses a shared key for authentication, and generates and uses a different dynamic keys when communicate through out the session, as a result, it provides a stronger level of encryption.

5. Enable MAC Address Filtering
Every Wi-Fi adapter posesses a unique identifier called the media access control (MAC) address. Current wireless routers allow us to deny any connection request from other computer that are not listed in the router's list as an added authentication process, meaning, it creates another layer of authentication on top of the WPA authentication. However, it is important to note that this feature is not as powerful as it seems to be, as there are available software which enable us to fake MAC addresses easily.

6. Assign Static IP Address
Most routers come with a DHCP software which allow us to assign IP address automatically and conveniently. Unfortunately, this feature facilitates the hackers to connect to our network easily. Disable this feature, and change the default range of IP address - 192.168.1.x to a different range, such as 10.10.10.x. This would help you to prevent unwanted computers from joining your network.

7. Reduce Reachable Range Of The Wireless Signal
Wireless signal weaken as it travel a distance away from the source. Metal, concrete walls and floors interfere and weaken it signal as well. Use these disadvantages to your advantage. Position the router, in such a way that it provides good signal coverage within your home, but minimize the reachability from outside - probably, in the center of your house. This will reduce the attack by the hackers.

8. Turn Off When You Don't Use It
When you don't use it, turn it off. Sound impractical. But, this is the best way to defend your network from the hackers.

9. Enable Firewall On Router And Each Computers
There is not enough protection just by controlling the access that is unique to the wireless network alone - reachability to its signal from the surrounding. What is possible to the wired network is also possible to the wireless network - attacks originated from the Internet. Therefore, turn on your router's firewall and a desktop firewall on each computer. Then, apply the strictest rules - "deny-all", then open the required ports only.

10. Install And Update Anti-Virus And Anti-Spyware
Viruses, Spywares, Malwares, Trojan Horses are also the threats to your networks security. Install and always update the anti-virus and anti-spyware. As new version available, upgrade it. Older version might not able to deal with newer threats.

11. Update Patches When Available
New flaws always being found, and new patches is always created. Update every patches immediately - when it is available. If you are a Windows XP users, turn windows update on. This will keep your computer up-to-date with all available patches.

2 comments:

Sebastián Stucke said...

Hi, I wrote howto for cracking wifi networks encrypted with wep, you may see it here:
http://en.tuxero.com/2007/08/howto-crack-wep-sony-vaio.html
http://www.tuxero.com/2007/08/howto-crack-wep-sony-vaio.html
I also gathered some recommendations to protect our wifi networks:
http://en.tuxero.com/2007/08/how-to-make-wireless-network-more.html
http://www.tuxero.com/2007/08/cmo-hacer-una-red-wifi-ms-segura.html
Cheers!

jonny said...

thanks for tips dude.
hi,today i just cracking wep use windows and vmware.just take 3 minute to gey the key.
very simple,no need remember many command.just type 1,2,3,4 and finish!!
i just follow this tutorial cracking wireless wep use windows in 3 minute
WEP now not safe for your privacy.Use the WPA and put the crazy password for your privacy.