Home > Ask the Security Experts > Network Security Questions & Answers > Do WEP weaknesses call for an upgrade to WPA2 encryption?
Ask The Security Expert: Questions & Answers
EMAIL THIS

Do WEP weaknesses call for an upgrade to WPA2 encryption?

Mike Chapple EXPERT RESPONSE FROM: Mike Chapple

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 25 May 2007
I know that there have been reported weaknesses in Wired Equivalent Privacy (WEP). For those of us who have legacy hardware that doesn't support WPA2, how urgent is it to consider new hardware?

>
EXPERT RESPONSE
If your wireless networking hardware doesn't support Wi-Fi Protected Access (WPA) encryption, an upgrade is absolutely critical. The Wired Equivalent Privacy (WEP) standard has widespread, documented vulnerabilities, and it doesn't take an NSA-style supercomputer to exploit them. In fact, the Internet offers network-detector tools like Aircrack, which can easily break into WEP-encrypted networks. Someone sitting in a parking lot could crack your WEP encryption in minutes without ever entering your building.

What does this mean? If you're using WEP, your network and data are at significant risk. The best-case scenario is that you might have unauthorized individuals using your network and consuming your bandwidth. More nefarious individuals, however, might use your network for illegal activities: activities that would be traced back to your IP address range. Thieves might conduct corporate espionage, stealing your organization's private data as it flies around the wireless network.

The bottom line is that you should make the investment to upgrade your wireless gear to support WPA encryption. It's the responsible thing to do.

More information:

  • Not convinced? Executive editor Dennis Fisher explains why users should switch to the more secure Wi-Fi Protected Access 2 (WPA2).
  • Learn how malicious hackers exploited Wi-Fi weaknesses to access 45.7 million credit and debit card holders' information.


  • Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


    RELATED CONTENT
    Network Security
    What warning signs will indicate the presence of a P2P botnet?
    What reporting tools are available for an enterprise IDS?
    Is it possible to allow select access to IP addresses using Windows Server 2003?
    Is an IPsec VPN necessary when connecting remote servers that process financial transactions?
    What are best practices for creating an IDS and maintaining a signature database?
    What are the best ways to hide system information from network scanning software?
    What are the security risks of opening all the ports on an internal router?
    Will Cisco's plan to open access to the IOS improve network security?
    Will VoIP attacks result in more than just spam?
    Should enterprises implement a mandatory iPhone VPN?

    Wireless Protocols and Standards
    PCI groups to focus on wireless, pre-authorization changes
    PCI DSS 1.2 clarifies wireless, antivirus use
    Bluetooth 2.1 is easy to crack
    Are wireless networks inherently insecure?
    What are the dangers of using radio frequency identification (RFID) tags?
    Lessons learned from TJX: Best practices for enterprise wireless encryption
    Should the enterprise be concerned with the Apple iPhone's automatic connection to Wi-Fi networks?
    TJX should have had stronger Wi-Fi encryption, say Canadian officials
    Wi-Fi simplicity edging out Wi-Fi security
    VeriSign, AirMagnet team up for wireless IPS

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice



    Find Security Solutions for Your Business
    Targeted Security Channel Tips for Resellers, Integrators and Consultants
    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




    All Rights Reserved, Copyright 2003 - 2008, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts