New Wi-Fi security would do little for public 'hot spots'

By Bob Brewin

October 31, 2002 12:00 PM ET

Computerworld - The new security features that wireless LAN vendors plan to build into products under the Wireless Protected Access (WPA) program will do little to protect enterprise or individual users in the booming Wi-Fi public-access "hot spot" market.
That market got another boost yesterday as Redmond, Wash.-based T-Mobile announced plans to provide such service in clubs and lounges operated by American Airlines Inc., Delta Air Lines Inc. and United Air Lines Inc.
John Pescatore, an analyst at Gartner Inc. in Stamford, Conn., said public-access providers such as T-Mobile and Boingo Wireless in Santa Clara, Calif., typically don't turn on any form of security, because to do so would inhibit their business by reducing the convenience of the high-speed (11M bit/sec.) Internet access these operators sell.
Pescatore advises that mobile enterprise workers use a virtual private network (VPN) connection if they intend to use a public-access WLAN service to tap into a corporate database or e-mail server. He also suggests that anyone using a public-access Wi-Fi service install a personal firewall to prevent snooping by other users on the same public network.
Peter Beardmore, senior marketing director at Colubris Networks Inc., which sells a "hot spot in a box" WLAN setup through Boingo, said public-access WLAN users without a firewall run the risk of another airport or coffee shop user poking around in their files using the "Network Neighborhood" tools found in the Windows operating systems.
Beardmore said Colubris, based in Laval, Quebec, helps Boingo prevent this kind of casual sniffing by "forcing all traffic upstream" to a Colubris server either incorporated into the access point or separate from it. This technique, Beardmore said, prevents what he called "paper-to-peer" sniffing of one client on a public-access WLAN network by another.
But Bearmore agreed with Pescatore that enterprise users should also protect their data through the use of a VPN.
Eventually, he said, public-access providers could build the authentication part of WPA into their servers for monthly customers, providing companies such as Boingo with a way to authenticate the identity of regular -- though not casual -- customers.

Recommend Digg Twitter ShareThis

Email Print Send Feedback Reprints

Additional Resources

Xerox

Win a color printer!

By using solid ink technology only from Xerox, you could save up to 65% by printing color for the cost of black and white. Enter for a chance to WIN a PhaserTM 8860 network color printer!

Microsoft

Upgrade to Internet Explorer 8 today.

Save time and mitigate security risk. Deploy it now.

Sybase

NEXT-GENERATION MOBILITY PLATFORMS

In this white paper, IDC analyzes the role of next-generation mobile enterprise platforms as organizations seek a more strategic deployment of mobile solutions.

Learn the important issues you must consider before starting your next mobility initiative. Get your mobility white paper from IDC now, compliments of Sybase.

White Papers & Webcasts

iPhone for the Enterprise
One of the biggest concerns of using the iPhone for the enterprise is the security and manageability issues. Read this white paper to...

5 Architecture Issues that Impact BES performance
This Live webinar will identify critical log file errors, performance counters, and configurations to pay close attention to when optimizing BES server performance....

Yankee Group Mobile WAN Optimization Report
Mobile work continues to evolve. Learn how to keep up with the demands of your organization's mobile workforce....

Managing Laptops Outside the Office
(Source: Absolute Software) In this webinar, learn how you can reduce costs by tracking mobile computers no matter where they are located. Featuring...

Mobile Device Management for Dummies
Did you know that up to 70% of enterprise data exists in various frontline settings, from laptops to handheld devices, to store and...

What Are 'Free' Remote Support Tools Really Costing You?
(Source: LogMeIn) In this webinar from LogMeIn, discover how "next generation" remote support tools are optimized to provide advanced capabilities like scripting, system...

Ponemon Study: The Business Risk of Lost Laptops
Employees can access and store enormous amounts of confidential data on your organization's laptops, leaving your company vulnerable to substantial business risk when...

IT Strategies for Remotely Supporting a Distributed Workforce
(Source: Citrix Online) Today's workforce is a distributed one - workers across industries are telecommuting, working out of satellite offices and connecting into...

Airport Insecurity: The Case of Lost Laptops
(Source: Dell) Business travelers lose more than 12,000 laptops each week in U.S. airports, yet most admit they don't take steps to protect...

Strategic ECM Webinar
Learn what new strategic business benefits can be realized through ECM!...

All White Papers | All Webcasts