Wireless Network Security (Part 2) by Robert Beckerdite

Date: 
19 Feb 2009

This is part two of a two part series about wireless networking. Part one addressed the broader topic of wireless networking security and definitions relevant to wireless networking security. Today the discussion is on wireless networking security while traveling or at a free access point. Many of us are mobile, taking our laptops with us on vacation, to meetings, and to coffee shops. While it’s a real benefit to have this mobility, the risks need to be weighed against the benefits and appropriate precautions taken. Connecting to unknown networks is risky.

When a laptop is taken out of your home or office and connected to a wireless network at a coffee shop or an airport, it is important to keep in mind that the network you connect to may not be very trustworthy. It is relatively easy for someone to setup a computer or another access point to execute a “Man in the Middle Attack” on your computer. Man in the Middle Attack is when someone falsely identifies themselves and then relays the traffic to your destination. This attack allows someone to secure items like username and password unencrypted while providing you the site you wish to access. To address this concern, use only the network that the establishment (shop, hotel, airport, etc.) identifies as their own. Verify the network that you have connected to is the right one by confirming the network name with the staff.

When you are travelling or roaming, try to avoid accidentally connecting to a wireless network by turning off your wireless adapter when you are not using it. This will ensure that your computer only connects to the wireless networks you choose. If you do not turn the adapter off, it may connect to networks on its own.

One additional undesirable side consequence of joining a free or public wireless network is that you immediately join a local network connecting your machine to any other computer on the network. In computer terms, this is like many strangers all drinking from the same public water fountain. Having your computer's firewall enabled provides some protection in this scenario. Avoid public networks if you do not have a firewall protecting your computer.

Finally, do not transmit Personally Identifiable Information (PII) over free wireless networks unless you are absolutely confident in the network's security. Personally Identifiable Information (PII) is used to refer to credit card numbers, social security numbers, and other data that could put you at risk if disclosed. Consider phoning a bank or a store, rather than logging in, if you must immediately make a purchase or find an account balance. Remember, any information sent on your wireless adapter is broadcast 150 feet. In computer terms, that's like shouting your personal information into a bullhorn.

Wireless networking security is a very diverse and complex subject. There are a number of additional, though somewhat more complicated, ways large organizations address this subject. If you are building a network for your company or business, consider hiring an Information Technology (IT) professional. If you work for a company with their own IT department, be sure to follow their guidelines on Internet security.

To learn more about wireless connectivity, join and become active in the Redwood Technology Consortium.

Robert Beckerdite provides local technology services focused on Technology, Legal and Healthcare Business sectors in Humboldt County and is a member of the Redwood Technology Consortium.

Copyright 2009, Eureka Times Standard Newspaper. The print version of this article first appeared in the 2/19/09 edition of the Times Standard.