Is Wireless Security a Big Deal? Commercialization of IT services, an increase in working from remote locations, and an overall reliance on mobile devices have all made wireless security incredibly important.

While we all enjoy the efficiency of wireless communication, criminals are using sophisticated strategies to hack into networks and steal valuable data.

Since 2005, Privacy Rights Clearinghouse reported 250 million personal records were lost or stolen. To make thinks worse, these security attacks can target bigger corporations that are holding data affecting a huge number of people. 

In 2005 TJX, parent company of retail chains such as TJ Maxx and Marshalls suffered the largest breach in consumer data security. Hackers positioned in the parking lot of Marshall’s department store used a WiFi internet connection to access the TJX headquarter database. From this they were able to obtain credit card records of over 47 million customers. Were you one of them?

WiFi Basics
    
When you use a wireless-enabled device such as your laptop you are communicating data back and forth between an internet access point and your device. The access point is usually hosting other devices and networking information between them all. Because of its efficiency and convenience, WiFi networking is used in homes, offices and even public areas. Retail businesses such as Starbucks and Borders often provide free wireless hotspots as a way to attract customers.

WiFi encryptions can be used to protect wireless data transfer but many individuals and businesses use weak or even no encryption on their networks. Wired Equivalent Privacy (WEP) is often used to encrypt WiFiI transfer but its security is outdated and is very easy to hack. WiFi Protected Access (WPA and WPA2) is more secure but can still be compromised.

Breaching WiFi Security

Hackers use multiple techniques to access passwords and data used in a WiFi network. The following terms describe a few common strategies:

• War driving: The strategy of driving around searching for open or low security access networks.
• Brute Force: The hacker attempts all letter, number, and special character combination until the correct one is retrieved
• Dictionary Attack: A specific collection of words from the dictionary is used to guess the password.
• Rogue Access Point:  The hacker creates an imitation access point that can be used to direct users to phishing webpages even long after they have disconnected from the affected network. These webpages will request the users to re-enter sensitive information that can then be used by the hacker.

Once the access point is intercepted a hacker can view and collect website passwords, files, and other private information that is being transferred. As wireless devices become more and more powerful, hackers are able to develop and use increasingly advanced programs to enter WiFi connections.

How Can You Protect Yourself?

Along with ensuring your WiFi connection is encrypted (with at least WPA), there are a few other protective procedures that you or your company can do:

• Use a Virtual Private Network (VPN): This creates a protective tunnel between your wireless device and the access point.
• Use Strong Wireless Security: Use WPA2 or stronger wireless encryption on your devices.
• Use Secure Website Protocols: Make sure you are only transferring sensitive information to websites that have enhanced security such as SSL (Secure Socket Layer) or HTTPS (Secure Hypertext Transfer Protocol). This creates a protective layer between your device and the website.
• MAC Address Specific Base Station: When using a personal WiFi network, configure your router to only accept data transfers with your specific computer’s MAC (Media Access Control) address.
• Hide Your SSID: Each wireless connection is identified by a SSID which is similar to a username. Make sure this is not being publicly broadcast so other     devices are not able to easily pick it up.
• Password Strength: Make passwords long and difficult to guess or reconstruct.

Wireless networks are an incredibly useful resource for our daily productivity.  With the proper protective measures in place, you can use this resource in a secure fashion and have peace of mind knowing your data is secure.

Russ Levanway is the CEO of TekTegrity, Inc. TekTegrity is an IT Strategies and Management firm that provides premium IT services to businesses, government, education and non-profit organization in San Luis Obispo, Santa Barbara, Monterey and Kern counties. TekTegrity’s goal is to become your organizations long-term strategic partner by supporting your IT infrastructure with your bottom line in mind. Some of TekTegrity’s services include System and Workstation Installation, Virtual Hosted Servers, Priority Backup, Off-Site Data Replication,, and Total Systems Management™ (TSM). TSM is an industry-leading managed services model that emphasizes proactive and preventative IT support at a predictable fixed monthly fee. For more information about TekTegrity, you can reach them by email at This e-mail address is being protected from spambots. You need JavaScript enabled to view it , on the Web at www.tektegrity.com, or by telephone at 805-596-0135.