Chapter 10: Basic Wireless Network Security

---

Introduction

In Chapter 9, “Attacking Wireless Networks,” we looked at valid methods that an attacker can use to gain access to wireless networks. In this chapter, we will discuss ways that wireless networks can be configured to reduce the risk of a successful attack.

A knowledgeable attacker, who is determined to compromise your system specifically, will probably be successful. In a home environment, it is unlikely that you will face this type of attacker, but for preventive measures, the steps presented in this chapter are designed to reduce your risk of becoming a target of convenience. A good analogy is The Club that many motorists place on their steering wheels when they lock their cars. A knowledgeable car thief that is looking to steal a particular car can easily pick the lock on The Club in a matter of seconds. You may ask, “then what is the point of even putting The Club on my car?” The point is that the car thief has a parking lot full of cars, many without The Club. Why would he bother to waste the extra time picking the lock on The Club, when he can simply choose a different car?

Wireless security is similar. Because there are so many wireless networks that are still configured with out of the box settings, an attacker that is looking for a target of convenience (for example, a network, but not necessarily your network) will likely choose one of the more vulnerable networks. This chapter looks at how to configure the basic security settings on the four most popular access points currently deployed (Linksys WAP11, BEFW11SR, and WRT54G, and the D-Link DI-624).

There are four very simple steps that are sufficient for most home users:

1. Use a unique Service Set Identifier (SSID).

2. Disable SSID broadcast.

3. Enable Wired Equivalent Privacy (WEP) encryption.

4. Filter access by Media Access Control (MAC) address.

---