Home > Ask the Security Experts > Network Security Questions & Answers > Is it possible to identify a fake wireless access point?
Ask The Security Expert: Questions & Answers
EMAIL THIS

Is it possible to identify a fake wireless access point?

Mike Chapple, featured expert EXPERT RESPONSE FROM: Mike Chapple, featured expert

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 10 October 2007
With a wireless LAN hotspot, how do you know if you're connecting to a fake or real access point?

>
If you're using an unsecured network, quite simply, you don't. In that scenario, the only "proof" that you have of the network's identity is the service set identifier (SSID), or the "name" that is broadcast by the network. Unfortunately, anyone can configure a wireless network to have any SSID they'd like, so there is no real proof of identity in that case. When using an unsecured network, I strongly recommend configuring the host firewall to block all inbound connections. You should also use a VPN to encrypt all traffic between your computer and remote systems.

If you're looking for stronger proof of identity, you'll need to turn to secure wireless options. Wi-Fi Protected Access (WPA) provides a network connection when a shared secret key is verified. In a WPA scenario, a successful access attempt at least indicates that you're connecting to a network that is set up by someone who knew the shared secret. Unfortunately, if you're dealing with public hotspots, such verification generally isn't an option. Therefore, you'll need to assume the network is hostile. To ensure that you're practicing safe wireless networking, you should resort to the security measures I mentioned above.

More information:

  • Learn why public wireless networks present a raft of dangers.
  • Find out how mulitpots and 'evil twins' are bypassing enterprise Wi-Fi defenses.


  • BROWSE BY TAG
    Network Security,   Wireless Network Security: Setup and Tools,   Wireless LAN Design and Setup,   Enterprise Network Security,   NAC and Endpoint Security Management,   Client security,   VIEW ALL TAGS

    Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



    RELATED CONTENT
    Network Security
    How to set up a split-tunnel VPN in Windows Vista
    What is the difference between static and dynamic network validation?
    Port scan attack prevention best practices
    Securing the intranet with remote access VPN security
    How to prevent network sniffing and eavesdropping
    How to implement virtual firewalls in a complex network infrastructure
    How to manage network bandwidth with distributed ISP bandwidth
    How to edit group policy objects to give a user local admin rights
    How to prevent operating system cloning with AES 256-bit encryption
    How to securely connect a LAN POS to a remote point-of-sale device

    Wireless LAN Design and Setup
    Wireless network guidelines for PCI DSS compliance
    Best Wireless Security Products
    How to prevent wireless DoS attacks
    Lesson 4 quiz: How to use wireless IPS
    Wireless intrusion prevention systems: Overlay vs. embedded sensors
    Rogue AP containment methods
    How to monitor WLAN performance with WIPS
    The role of VPN in an enterprise wireless network
    Wireless AP placement basics
    Lesson 3 quiz: Who goes there?
    Wireless LAN Design and Setup Research

    Client security
    How to keep networks secure when deploying an 802.11n upgrade
    InZero Systems launches hardware-based security gateway
    DLP technology challenges security costs
    Endpoint protection best practices manual: Combating issues, problems
    Kaspersky update for SMBs in wake of free Microsoft Security Essentials
    Microsoft makes free antivirus software widely available
    Security best practices in hotels
    Best Antimalware Products
    Perimeter defense in the era of the perimeterless network
    Microsoft Security Essentials (MSE) shows no vision, expert says

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    evil twin  (SearchSecurity.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice



    Find Security Solutions for Your Business
    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Site Map




    All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts