How to build a secure WLAN

By James Liu

February 6, 2003 12:00 PM ET

Recommended

(4)

Digg

Twitter

Share/Email

Computerworld - Real-time network protection required for wireless networking
Wireless LANs have experienced tremendous growth since the introduction of the 802.11b wireless networking standard spurred the development of a wide range of "Wi-Fi" solutions developed by network equipment vendors. Flexibility, ease of deployment and low component costs constitute three major drivers for the popularity of WLANs. However, the same flexibility and mobility provided by wireless networking also introduces new security vulnerabilities in addition to those that threaten conventional LANs. For real-time communications like Wi-Fi, a comprehensive real-time network protection strategy is required to enable pervasive, widespread deployment.

WLAN security threats inhibit build-out
Because WLANs use publicly available radio spectrum as the medium to carry data, unauthorized access and eavesdropping are key concerns. Major security threats to WLANs include the following:

WLAN access points can be probed by anyone within reach of the network's radio signal, thus constituting physically unbounded entry points from which to launch intrusions, viruses and all other types of attacks that threaten landline networks.

WLAN access points are often deployed inside corporate networks behind conventional firewalls, making these access points even more attractive as points for launching attacks.

WLANs are extremely vulnerable to denial-of-service attack and interruption. Any malicious hacker with a laptop and a wireless Network Interface Card can transmit wireless signal interrupters in close proximity to company sites where WLANs are deployed and effectively jam a Wi-Fi signal.

Internal employees can set up their WLAN interface cards to operate in peer-to-peer (P2P) mode to communicate directly with people outside of the company.

Naturally, the framers of the 802.11b wireless standards were aware of these vulnerabilities and designed a number of security features into the technology to address them. These include the following:
The use of Service Set Identifier (SSID): The SSID is a shared secret (typically an ASCII string) that has to be configured by network administrators into all access points and wireless terminals (e.g., PCs) that share a common WLAN. The weakness of the SSID is that it's a relatively simple password, common to all devices on the WLAN, and once the SSID is compromised, any device with the SSID can gain unrestricted access. Furthermore, the default setting of SSID is often not changed in WLAN deployments, and access points are typically configured to broadcast their SSID, further degrading security because intruders can get the SSID through easily obtainable tools.
Media Access Control (MAC) address filtering: Since every WLAN terminal's network card has a unique MAC address, it's possible to manually maintain a set of allowed MAC address lists for

Recommend Digg Twitter ShareThis

Email Print Send Feedback Reprints

Jump to comments

Mobile/Wireless

Additional Resources

WHITE PAPER

Do You Know the 7 Steps to Successful Data Migration?

Approximately 60 percent of data migration projects overrun time or budget, while some fail completely. Download this white paper, "Enhancing Your Chance for Successful Data Migration," to learn the critical steps you need to take to execute a data migration project with minimum cost and risk to your business.

WHITE PAPER

Total Cost of Ownership of Server Computing Vs. PCs

Read the Gartner research note to learn why the TCO of a server-based computing deployment used to deliver all applications to users is around 50% lower than that of an unmanaged desktop deployment.

WHITE PAPER

IDC White Paper: Linux in a Global Recession

Economic downturns have a tendency to accelerate emerging technologies, boost the adoption of effective solutions, and punish solutions that are not cost competitive or that are out of synch with industry trends. This IDC White Paper presents the results of an IDC survey of 330 companies in Western Europe, Asia/Pacific and the Americas that measures the receptiveness to Linux and takes into consideration changing views driven by the disruptive economic environment that businesses face today.

White Papers & Webcasts

Informatica 9 Launch: Transform your Business. Transform your world.

LIVE Nov 10, 2009 12:00 PM ET

Architecting Business Intelligence Applications for Change: The Open Solution

LIVE Nov 12, 2009 02:00 PM ET

Forrester Consulting - Optimizing Users and Applications in a Mobile World
Learn how to successfully deploy a WAN optimization solution that is specifically tuned for a mobile environment!

Managing Laptops Outside the Office
Learn how you can reduce costs by tracking mobile computers no matter where they are located.

WAN Application Delivery for Executives
Learn how to simplify server and application administration without creating performance problems for distributed users.

4G Ahead Video Program
Uncover the features and benefits of the two leading 4G technologies for enterprises considering future deployment.

Applying Remote Support Technology for Maximum Impact
Download Now!

Complimentary Webcast: Taking a Strategic Approach to Enterprise Mobility
Download This Webcast Today!

Measuring the Business Impact of Support
This ServiceXRG White Paper explores the importance of quantifying the impact of support on your business.

Lower the Cost and Complexity of a Mobile Workforce through Automation
Download This Resource Now!

Drive Down Enterprise Mobility Costs
Learn to empower your mobile workforce while simplifying mobility management and controlling costs.

Managing Mobility: Improve Data Security, Compliance and Manageability
Download This Resource Now!

All White Papers | All Webcasts