Wireless Access Points - How Secure are They?
by Jonathan Burnside ©2004

Business Networks
With wireless access points (AP’s) becoming evermore common, companies are urged to prevent users from installing their own wireless AP’s on the network. If they are going to be installed they should be configured correctly to ensure the network remains secure. It has been said that the new wireless technology offers the attacker an unrivalled opportunity but only when the wireless equipment hasn’t been configured properly.

In-order to combat the threat of attacks it is important that firms have up-to-date security policies that reflect the modern mobile world, where the word wireless is becoming more prolific. Such a concern is this new security problem, that it has been advised that your company network should not link to any other company’s network. What is the point of making your own network secure when you have a link to someone else’s network that could have security breeches all over it, especially with the advent of wireless AP’s.

The whole IT industry is concerned about wireless, but it is something they know they need to tackle; it’s not something that will go away. When networks were all completely hardwired, the network was kept within the building; there were only certain points where an attacker could get in. It was at these points with the outside world that the security measures would be employed to the fullest. However, wireless technology means that a wireless AP can be installed resulting in the company network suddenly being extended outside the walls of the building.

Home Networks
Home users are also starting to utilise wireless technology. They use it for sharing ADSL broadband connections so that the entire household can have access to the Internet, to share files and network resources such as printers, scanners etc. Some machines on these home wireless networks are also connected to their employer’s network, therefore creating a security breech that is easy to exploit. Most wireless equipment doesn’t come with any security default, so when installed straight out of the box the equipment acts as a big gateway to potential attackers.

AP’s can be installed with considerable ease, which is one of the reasons they are becoming so commonplace amongst home users. People have such a casual attitude when buying and installing the equipment, they just don’t realise that they are potentially allowing others access to their private information and sometimes their employers.

Where’s it Going!!
Hopefully a security culture will develop around wireless equipment. The IT industry already knows that wireless networks cannot be completely secure but there are measures that can be taken to reduce the risks considerably. There are too many to mention here, but needless to say, the industry will react to these security risks, they have to!