UM Study: Password Protecting Your Wireless Network Is Not Enough
FOR IMMEDIATE RELEASE
COLLEGE PARK, Md.—College students do it. Coffee shop customers do it too. Your neighbor in Apartment 3C is probably doing it right now.
Many computer users search for an available wireless network to tap into—whether at the mall, at school or at home—and whether they have permission to use that network or not. Knowingly or unknowingly, these wireless "parasites" may be doing more than filching a signal. When they connect, they can open up the network—and all the computers on it—to an array of security breaches.
These problems are compounded when someone allowed to use an organization's wireless network adds an unauthorized wireless signal to increase the main network's signal strength. These unauthorized access points are especially vulnerable, often unprotected by any security measures that may exist on the main network.
At home, people usually use passwords to protect their wireless network from unauthorized access. But a new study by the A. James Clark School of Engineering's Michel Cukier indicates passwords alone may not provide enough protection for home wireless networks and are particularly inadequate for the wireless networks of larger organizations. Cukier is an assistant professor of mechanical engineering and affiliate of the Clark School's Center for Risk and Reliability and Institute for Systems Research at the University of Maryland.
At many organizations and locations around the country, thousands of users access widespread wireless network legitimately at any given time. But in turn, some of these users set up their own wireless networks, linked to the official network, to increase the signal in their office or home—what computer experts call an unmanaged wireless access point.
"If these secondary connections are not secure, they open up the entire network to trouble," Cukier said. "Unsecured wireless access points pose problems for businesses, cities and other organizations that make wireless access available to customers, employees, and residents. Unsecured connections are an open invitation to hackers seeking access to vulnerable computers."
Cukier recommends that wireless network owners and administrators take the following precautions to better secure wireless networks from "parasites" trolling for access and unsecured connections set up by legitimate users:
Limited signal coverage
Turn off SSID broadcasting
About the A. James Clark School of Engineering
The Clark School's graduate programs are collectively the fastest rising in the nation. In U.S. News & World Report's annual rating of graduate programs, the school is 15th among public and private programs nationally, 9th among public programs nationally and first among public programs in the mid-Atlantic region. The School offers 13 graduate programs and 12 undergraduate programs, including degree and certification programs tailored for working professionals.
The school is home to one of the most vibrant research programs in the country. With major emphasis in key areas such as communications and networking, nanotechnology, bioengineering, reliability engineering, project management, intelligent transportation systems and space robotics, as well as electronic packaging and smart small systems and materials, the Clark School is leading the way toward the next generations of engineering advances.
Visit the Clark School homepage at www.eng.umd.edu.