Tuesday, September 19, 2006

Computer Security: Wireless Networks

Wireless networks dramatically increase the versatility and usefulness of computers. I have one at home that allows four computers to share two printers and a high-speed internet connection. It works great! The technology has made them so inexpensive and easy to set up that almost anyone can do it – even those who may be completely unaware of the security risks. And that is the problem.

For example, I can access three different wireless networks from the living room of a relative’s house. Only one of those networks belongs to him. The other two belong to neighbors who do not understand the first thing about network security.

The range of a wireless network can easily extend from your house well into the houses of those living nearby. Anyone within range of your unsecured wireless network could easily use it to access the internet, which makes your network run more slowly. But, that is insignificant compared to what else he could do. With just a little time and effort, a knowledgeable person could even monitor every web page you visit, read everything you print on a networked printer, access the files on your unprotected computers, and even record every credit card number you use to make an on-line purchase.

Home Wireless Networks

Network security is an oxymoron. No network can be completely secure. If your data is interesting or valuable enough, someone will eventually find a weakness and exploit it. Fortunately, most of us are not worth that kind of concentrated effort and we can easily reduce our risk to an acceptable level, simply by using the built-in features that come with modern networking hardware.

The default settings for most home networking equipment create an open, i.e. not secure, network. I hope you are convinced by now that it is worth the effort to change the security settings on your equipment. I cannot list the details of how to do that on every possible system, but there are three things you can easily do by reading the manual and following its instructions.

FIRST: Change the SSID (Service Set IDentifier) or ESSID (Extended SSID). This is the name of your network. Then disable the SSID or ESSID broadcast. When you broadcast your SSID, any computer with a wireless network card knows there is a network nearby. If that notification is disabled, most people will not even be aware that you have one. It is important to change the name, because some people have equipment that will detect your network anyway. If they do, you want to keep the specifics about it as secret as possible. They will know what equipment you are using by the manufacturer’s default SSID, and this makes it easier for them to access your network. Use a network name that does not make your network appear interesting and will not identify you as the owner. “Home” or “Network” may be good choices.

SECOND: Change the default administrator password. If your network is detected, and the equipment is correctly identified, the default password will give an intruder complete access to your system. Make it hard for someone to guess.

THIRD: Turn on your encryption protocol. This will keep most people out of your network. There are methods of cracking encryption codes, but they usually require at least a few hours to accomplish. There are two types of encryption in common use. One is WEP (Wired Equivalency Privacy), which is found on older networking equipment. The newer one is WPA (Wi-fi Protected Access), which is much more secure. Use WPA if possible.

Public Wireless Networks

These are often found in hotels, truck stops, coffee bars, etc. By their very nature these are not secure networks. Anything you do on a public network can be monitored. Use them only for casual surfing. Never conduct any financial transactions or access confidential email messages on these networks. And, finally, make sure your computer has firewall software installed and turned on.

Rex Fisher's Safety & Security Web Page

Monday, September 18, 2006

Personal Security: Especially for College Students

Enhancing your personal security as a college student is not much different than it is for non-students. Any list of generic personal security tips applies equally to you. The biggest difference between you and them is that you probably have not thought much about it until now. This may be the first time you are away from home and on your own. Things that your parents did for you, or reminded you about, just a short time ago are now your responsibility.

I am a professor in a small college town in rural Idaho where my oldest daughter just graduated with her degree. I have seen, firsthand, how casually students treat their personal security. They just do not believe anything will happen to them – especially in a small town like this one. The sad truth is that there is a lot of crime perpetrated against college students. Campus crime statistics from all over the United States show that the three most common offenses are burglary, vehicle theft, and assault. You can reduce the chance that it will happen to you. Most of what you can do is very simple; you just need to remember to do them

Burglary

As a group, college students have more expensive computer and electronic equipment than the general population. These items are valuable, easy to sell, and very portable. Because students spend a lot of time socializing in each other’s apartments and dorm rooms, nobody regards it as suspicious when they see people they do not know coming and going. An unlocked apartment is “easy pickings.” Always lock your door – even if you will only be across the hall for a few minutes.

Vehicle Theft

You can usually tell which cars belong to students, and which ones belong to faculty at my university. Students drive the expensive ones. They are the ones most likely to be stolen. But, even more common than losing your car, is having your belongings taken from it. Students tend to keep a lot of valuables in their cars. Make sure they are out of sight. Locking them in the trunk is even better. Always lock you car with the windows up – even on blistering hot days.

Maybe you ride a bike instead. Bicycles are also popular targets for thieves. They can be very expensive and are often easy to steal. When a thief rides away on your bike, everyone will just think he owns it. Always lock up your bike with a good cable or frame lock – and take the front wheel with you if possible.

Assault

Your security after dark is of special concern, because this is when most assaults occur. Assault is bad enough, but sexual assault is even worse. It can scar you for life, so women should be particularly careful. There is safety in numbers. If you must be out after dark, go with a friend. If you cannot find another student you know to go with you, use a security escort. Many college campuses provide this as a free service for students traveling back to their dorms from the library or late night classes. You simply call campus security and some escorts will come to walk you home. Always walk with a friend or security escort after dark – even if it is just across campus.

Dating can also result in sexual assault. One of the best things you can do on a date to reduce the likelihood of this is to refrain from alcohol. Insist that your date does too. Drinking reduces your reaction time and increases the chances of being involved in an automobile accident. It also impairs your judgment, and weakens your inhibitions. Some men, sadly, hope it will make their date more receptive to sexual activity. Because alcohol makes some people aggressive, he might not take “no” for an answer. Aside from any moral issues you may have with sex, your date may have Herpes of HIV. There is no known cure for either of these diseases. Do not let your guard down. Always avoid alcohol during a date – it could save your life.

Rex Fisher's Safety & Security Web Page