|
LETTERS
|
|
There are no letters for this article. To post your own letter, click Post Letter.
|
|
[POST LETTER]
|
|
|
|  |
 |
 |
Tech Tip of the Month
Deploying Secure Wireless LANs
Deploying
Secure Wireless LANs
WLANs use a standard known as 802.11b, or Wi-Fi, that
works on the same unlicensed airwaves as household portable telephones. Everyone who has ever accidentally
intercepted others’ calls on these telephones realizes that the vulnerabilities
of this technology are significant.
To make matters
even worse, many WLAN devices are sold
with critical security features disabled for greater ease of installation, and
few users bother to implement the data-scrambling encryption that is a standard
feature of most units. Those who do use
all of the standard security features of today’s WLAN equipment may still be
invaded by unscrupulous individuals armed with software hacking tools that are
available for free on the Internet.
Breaking into
wireless networks has become so easy that some hackers are abandoning their
desktop computers to go "war driving," a term they have coined for
riding around in a car with a laptop and antenna to find access points and
infiltrate wireless computer networks.
Thankfully, there are some improvements in the
works. A breakthrough wireless
technology backed by Intel, Sony and other industry giants called ultrawideband
could eventually replace Wi-Fi. This
wireless technology is 3 to 10 times faster than Wi-Fi and offers much better
security. In addition, tougher
encryption standards for Wi-Fi are also under development.
However, these
changes will take some time to enter the marketplace, so adequate security for
today’s Wi-Fi systems is a must. Here
are some of the most effective measures:
1. Activate the
encryption system used to protect information flowing across the network. As noted above, these encryption systems are
easily deciphered, so don’t be lulled into a false sense of security after
taking this simple step.
2. Overlay the
encryption system with a secondary layer of security. For most businesses, this means extending the firewalls, virtual
private networks and intrusion-detection systems that they are already using
for Internet security.
3. Use PPTP, or
Point-to-Point Tunneling Protocol, which is included on most versions of the
Windows operating system. An even more
secure version of this kind of software, called IPSec or Internet Protocol
Security, is also available. However,
these systems will require their own servers, and IPSec requires licensing fees
on a per-computer basis.
4. Separate the
wireless network from the rest of the network and set up rules to access
it. Essentially, companies should keep
their wireless networks outside of their main networks and install firewalls
and gateways.
5. Deploy WLAN
equipment from Cisco and others that feature enhanced security via proprietary
software.
By following
these steps, companies can take advantage of the benefits of wireless computer
networks while avoiding the security drawbacks.
[PRINTER FRIENDLY VERSION]
|
|
|