1. Securing A Wireless Network
Jason Francis

2. Secure Wireless Device
Routers & Access Points
- Secure Login
- Change default password
- Password strength should be uncommon & strong
- Factory Reset

3. Enable WPA/WPA2 Encryption
WPA (Wi-Fi Protected Access)
Provides stronger protection than WEP
Passwords are limited to A-F & 0-9
Wireless Hardware & OS friendly
WPA2 provides strongest wireless encryption but users might have to download a patch

4. Using WEP WEP (Wired Equivalency Privacy) Known weaknesses
Better than no encryption at all
Used for non-pc devices (i.e. PDA, MP3, DVR)
Passwords should be changed often
Same Cryptographics

5. MAC Address Filtering
Unique 12-character address specific to network adapter
Limits network access to only those machines and devices that you know about
Can be inconvenient to setup if there are many devices and machines
MAC addresses can be spoofed by skilled hackers

6. Reduce WLAN Transmission
Available on most routers and wireless devices
Allows user to reduce signal of wireless range
Minimizes outsider attacks
Trial-and-Error

7. Disable SSID Broadcast
SSID (Service Set Identifier)
Routers & Access Points broadcast SSID continuously
Convenient when enabled for wireless setups
Undetectable to neighbors and war-drivers
Wireless Network can still be found using “sniffers”

8. Remote Admin
Remote Admin gives users the power to administer the network via the internet
Must use specific IP address or limited IP address range
Anyone anywhere could potentially gain access to your system
Best left disabled, unless you really need this function

9. Summary Change default password Enable WPA2 Encryption (if available)
If no WPA2 or WPA, WEP is better than no encryption at all
MAC address filtering
Reduce WLAN transmission
Disable SSID Broadcast
Disable Remote Admin
Enable Key Rotation

10. Extras

11. Tools Cain & Abel Aircrack
WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured.
- Used for auditing