Absolute Beginners Guide to Tablet PCs
Although it is easy to connect to wireless networks, that ease is also its greatest downfall. Security is a concern that all wireless users should think about. In addition to setting up file security on your Tablet PC (covered in Chapter 11, "Data Management and Synchronization"), you need to secure your wireless network access points. One of the best ways to secure your wireless network is to perform the following (you'll learn more about each of these steps in the sections that follow):
Step 1: Protect Your Tablet PC
The first way to secure your data is to limit physical access to your Tablet PC. Carry it with you, lock it up, use mobile security alarms and locks, and the like. This is crucial if you have critical data on your machine. In addition to limiting physical access to your Tablet PC, you should protect the files on your Tablet PC using file system security, as described in Chapter 11. Good security practices and data management will always be the first layer of protection. That way, even if people get onto your network, you can prevent infiltration by blocking them from your files. Tip
Step 2: Disable SSID Broadcast
If your wireless access point or router broadcasts its System Security Identifier (SSID), anyone in the vicinity with a wireless network adapter will be able to detect it. Once that is done, the person can connect to your network just by clicking a button.
Disabling the broadcast of your SSID will prevent the casual hacker one who is simply looking for open wireless networks to infiltrate from exploiting yours. More sophisticated intruders could be persistent enough to get your SSID, however, and thus access your network. If your access point does not broadcast the SSID, an intruder will have to guess (or use an application like Network Stumbler) in order to gain access to your network. Make sure your SSID is not composed of words or numbers that relate to you or your organization, such as the company name, an address, a person's or pet's name, and so on. For a person to connect to your network, that person must have the correct SSID assigned in his or her wireless network settings. If you have created a nonsensical SSID and stopped broadcasting it, you will prevent the majority of casual intruders. Step 3: Enable WEP
Once you have disabled SSID broadcast on your access point, the next thing to do to increase protection is to enable Wired Equivalent Privacy (WEP). WEP, though basic, is the most common form of security in wireless networks. Although WEP is not perfect, it is a second measure that can enhance security. Some people use WEP instead of disabling the SSID broadcast, but used in combination, they provide a formidable defense against intrusion for the novice wireless hacker. WEP is a security method used by most Wi-Fi access points. Enabling WEP can enhance security significantly, but it is not bullet-proof. When you enable WEP, you should create a WEP pass phrase that is nonsensical (for example, h7kqY73). This pass phrase will be used on both the access point and the wireless network adapter to create a "handshake." This handshake ensures that both sides of the connection know about the other side. By using the same pass phrase, the access point identifies your Tablet PC as friendly. Not all access points use pass phrases, however. If yours doesn't, you will be asked to enter a WEP key. A key is 10 or 26 hexadecimal characters (0-9 plus A-G). You can use 40- or 128-bit encryption (protection scheme). A 40-bit key will use 10 characters, whereas 128-bit encryption requires a 26-character key. 128-bit encryption is stronger. If you enable WEP on either the access point or your Tablet PC and not the other, you will be unable to connect. Make sure all your WEP settings are identical on your access point and your Tablet PC. Step 4: Change Your Default Password
Once you have your access point/router configured, change the default password. Most hackers can guess the device's default password if they can determine the manufacturer of your network device. Changing the password to a "strong" password will prevent a hacker from changing your access point's configuration. A strong password consists of upper and lowercase letters, numbers, and special characters such as punctuation marks. One last note on Wi-Fi security: As of September 1, 2003, the Wi-Fi Alliance requires all wireless products to have Wi-Fi Protected Access (WPA) security in order to carry the Wi-Fi compliant seal of approval. WPA is a subset of the 802.11i standard that is mentioned in the following sidebar.
|