Securing A Wireless Network Jason Francis

Secure Wireless Device Routers & Access Points - Secure Login - Change default password - Password strength should be uncommon & strong - Factory Reset

Enable WPA/WPA2 Encryption WPA (Wi-Fi Protected Access) Provides stronger protection than WEP Passwords are limited to A-F & 0-9 Wireless Hardware & OS friendly WPA2 provides strongest wireless encryption but users might have to download a patch

Using WEP WEP (Wired Equivalency Privacy) Known weaknesses Better than no encryption at all Used for non-pc devices (i.e. PDA, MP3, DVR) Passwords should be changed often Same Cryptographics

MAC Address Filtering Unique 12-character address specific to network adapter Limits network access to only those machines and devices that you know about Can be inconvenient to setup if there are many devices and machines MAC addresses can be spoofed by skilled hackers

Reduce WLAN Transmission Available on most routers and wireless devices Allows user to reduce signal of wireless range Minimizes outsider attacks Trial-and-Error

Disable SSID Broadcast SSID (Service Set Identifier) Routers & Access Points broadcast SSID continuously Convenient when enabled for wireless setups Undetectable to neighbors and war-drivers Wireless Network can still be found using “sniffers”

Remote Admin Remote Admin gives users the power to administer the network via the internet Must use specific IP address or limited IP address range Anyone anywhere could potentially gain access to your system Best left disabled, unless you really need this function

Summary Change default password Enable WPA2 Encryption (if available) If no WPA2 or WPA, WEP is better than no encryption at all MAC address filtering Reduce WLAN transmission Disable SSID Broadcast Disable Remote Admin Enable Key Rotation

Extras

Tools Cain & Abel Aircrack - 802.11 WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured. - Used for auditing