So You Think Your Wi-Fi Network is Secure?

Wi-Fi networks deliver tremendous benefits. They provide the ability to connect to the Internet almost anywhere at anytime. You can connect in your home, office, or the coffee shop without being tethered to a wall jack, and Wi-Fi is built into most laptop PC's.

Wi-Fi is also easy to set up if you don't think about security. Out of the box, you can quickly turn on your wireless network, and connect your without much effort. Without security however, everyone else can connect to your network with the same ease. If you don't take the steps to secure your wireless network everything you do over the wireless network can also be seen by hackers up to a mile away.

Who Needs Wireless Security?

One of the common reasons why users don't secure their Wi-Fi networks is that no one wants access to their network or that there is no important information on the network to worry about. Hacking is less about joy-riding on someone else's network and more about the financial payoff that can be gained by stealing confidential or personal information over the network. In fact, over half of cyber crimes are now committed over Wi-Fi networks, because they provide anonymity that wired networks don't provide.

With a poorly secured Wi-Fi network, a wireless hacker can read your email, see the websites you visit, and even access files on your system that aren't properly secured. Your e-mail username and password are easily picked off an unsecured Wi-Fi network when every time your email is updated. Once your e-mail account is compromised, it becomes very easy to gain personal identity.

Another common misconception is that Wi-Fi can only be accessed from 300 feet away. With a $50 antenna, a hacker can access your Wi-Fi network from a mile away, out of sight and undetectable.

War drivers looking for unsecured networks, locate and record Wi-Fi networks. They then share those locations on websites such as www.wigle.net for other war drivers and hackers to find and user those networks.

Why Are So Many Networks Unsecured?

While setting up a Wi-Fi network is easy, turning on security takes some technical expertise and the ability to understand terms like WEP, WPA, 802.1x, and EAP. While wireless equipment manufacturers provide access to these security parameters, very few of them make it easy to understand, or easy to set-up.

Wi-Fi Security for Dummies

There are 4 basic levels of Wi-Fi security: "Open" (unsecured), WEP, WPA-PSK, and 802.1X. Let’s walk through these techno-acronyms and explain these basic levels of security in less technical terms.

• "Open" is just that, open to all comers without any basic level of security. Like leaving your front door unlocked for anyone to enter, open networks are just a bad idea.

• WEP is the lowest level of security available on most Wi-Fi networks. Unfortunately, WEP have fundamental flaws that make it easy to hack and software on the Internet can crack WEP security in 10 minutes. WEP is equivalent to locking your screen door; it may keep your neighbor out, but it takes little effort to break in.

• WPA is the successor to WEP that is more difficult to crack. WPA is comparable to having a single lock on your front door, and giving a key to everyone you want to give access to. Keys can be shared or walked away with when someone leaves the network. The challenge with WPA is removing someone requires the entire network to be re-keyed and new keys re-distributed to valid users.

• "802.1X" is called enterprise-level security because it provides the highest level of Wi-Fi security available. 802.1X is widely deployed by Fortune 500 companies and eliminates the common key problem by providing a unique key for each valid user every time they enter the network. This is analogous to the room key used in hotels. Each authorized user gets a new unique key every time they enter the network valid only for the time they are on the network.

802.1x typically requires a RADIUS server, which takes training and some technical work to deploy and maintain. This put the highest level of Wi-Fi security out of reach for most small and mid-sized businesses because of implementation costs.

Products like WiTopia's SecureMyWiFi Business Edition addresses the need for small and mid-sized businesses to quickly and easily deploy strong Wi-Fi security. It can deliver 802.1x enterprise level security for small and midsize business that can be set up in less than 15 minutes without any wireless or security expertise.

It's important that wireless network users understand the dangers of unsecured networks, and properly secure their networks. Open (unsecured) and WEP are poor approaches to Wi-Fi security. WPA, while complex, offers a base level of security, and 802.1x offers the best security available. Businesses are best advised to use 802.1x through either RADIUS server or the more simplified approach that WiTopia offers.

How Secure is Your Wi-Fi Network Against War Drivers & Casual Network Intruders?

Did you know that your wireless Wi-Fi network can be accessed by hacker from over a mile away? With a laptop PC, Wi-Fi hackerware off the internet, and a $30 antenna, hackers can access your Wi-Fi network from much further away than your standard laptop can reach. If your network is unsecured or open, they have the capability to monitor every piece of information that is sent over the network, access your PCs, and if you're connected to a VPN, tunnel through to a corporate network.

War driving, the art of finding Wi-Fi networks, is becoming a popular game for many hackers. Armed with a PC, antenna, and GPS, hackers drive around their communities to locate wireless Wi-Fi networks, and can post them on popular war driving websites for all to access over the internet.

And finding unsecured networks is like shooting fish in a barrel:

Shipley, a computer security researcher and consultant, is demonstrating war driving. It doesn't take long to produce results. The moment he pulls out of the parking garage, the laptop displays the name of a wireless network operating within one of the anonymous downtown office buildings: "SOMA AirNet." Shipley's custom software passively logs the latitude and longitude, the signal strength, the network name and other vital stats After an hour, Shipley's black Saturn has crawled through rush hour traffic, and his jury-rigged wireless hacking setup has discovered eighty networks beaconing their location to the world.

http://www.securityfocus.com/news/8835

Walking down Yonge Street and Bay Street (heart of the Financial District in Toronto) one finds countless warchalking markings (warchalking refers to the "chalk marks" that people leave to indicate the proximity of open wireless networks). War driving, the act of looking for and using open, unsecure wireless networks is increasing with little-to-no legal action being taken. Until laws are set to deal with this, companies will need to deal with issues themselves.

http://www.enterpriseitplanet.com/security/features/article.php/3325971

Once wireless networks are identified by war drivers, they can be posted on numerous popular war driving websites. Many people are surprised to find out how easy it is to find their network up on a web site. To see if your network has been posted yet, try one of the more popular web sites:

http://www.wigle.net/gps/gps/GPSDB/onlinemap/

Type in your address & see what pops up.

When I put in my home address, my secure network wasn't found, but my neighbor's open Wi-Fi network was listed (unfortunately, his SSID was his last name) from the freeway which is over 1/2 mile from our house. His banking information and personal records were stored on his PCs on the network, and his POP3 e-mail account readily broadcast his username & password every time he received e-mail.

He has since secured his Wi-Fi network, but like many wireless users, he was under the misconception that because he couldn't get Wi-Fi access in his basement, hackers couldn't find his network. Not only did they find his network, they posted it on a web site along with the fact that it was not secured, the channel number, MAC ID, and the last time someone verified that it was still be open. Don't be a victim of hackers that want access to your personal & business information.

Is Your Wi-Fi Network Listed on the Internet?

Interested statistics from www.wigle.net where Wi-Fi hackers and and war drivers that capture Wi-Fi network information and post to the internet:

Total number of networks found: over 11,280,000

Percent of networks protected with WEP: 44.0%

Percent of networks not protected (without WEP): 40.5%

Percent of networks unknown: 15.4%

Pretty scary thought - somewhere between 40% and 56% of all Wi-Fi networks have no Wi-Fi security.

wigle.net is an interesting site. It's worth checking out to see if your network is on the hacker's radar screen. They have a great interactive map that allows you to type in your physical address and zoom into all of the networks (open and secured) that have been found by war drivers in your neighborhood.

Is your unsecured network listed on the Internet for everyone to see?