As the prices of low-end wireless network devices continue to decline and the operation becomes easier, low-end wireless LAN networks have become increasingly popular in recent years. To facilitate resource sharing, wireless printing, and mobile office operations, we only need to spend hundreds of dollars to buy an ordinary wireless router and a wireless network card device, you can quickly build a simple wireless LAN. However, the popularity of low-grade Wireless LAN networks is also likely to pose a great threat to the information security of the Organization. In this case, how can we resolve the security threats of low-grade wireless networks and enjoy the fast and convenient networking?
Poor Network Security
Connect to the residential broadband network in a wireless way and share the Internet access through the broadband network, we usually only need to connect the WAN port of the low-end wireless router with the exchange port of the residential broadband network through the common twisted pair wire, and then follow the instructions to set the connection port parameters of the wireless router, you can access the Internet. By default, the DHCP service is automatically enabled for low-end wireless routers. After we correctly install the wireless network card device on a common computer, you can automatically connect to the wireless LAN without any parameter settings. However, while enjoying the convenience of networking, the signal coverage of low-grade wireless routers can reach as far as 300 meters. If security measures are not taken, then, normal computers with wireless network card devices installed within 300 meters can be automatically added to the Local Wireless LAN network, so that the local wireless LAN is prone to illegal attacks.
At present, the formation of low-grade Wireless LAN has the following security disadvantages:
1. inadequate security mechanisms
Most low-grade Wireless LAN uses the WEP protocol with general security protection performance to encrypt and transmit wireless Internet signals. However, WAP protocol with high security performance is not used to protect wireless signal transmission. Even if common online users use the WEP encryption protocol and WEP key settings, illegal attackers can easily crack encrypted signals through professional attack tools, this allows you to easily intercept information such as the customer's Internet address, network ID, wireless channel information, and WEP Key, attackers can easily steal privacy or perform other illegal intrusion operations on local wireless LAN networks.
In addition, low-grade Wireless LAN almost does not support system log management, intrusion Security Detection and other functions. It can be said that the current security mechanism of low-grade Wireless LAN is not sound yet.
2. Physical isolation is not allowed.
Low-grade Wireless LAN is directly exposed to the outside world from the moment it was successfully established. Wireless Network access cannot be effectively isolated from physical networks, and various intentional and unintentional illegal attacks may exist at any time, the privacy information in the wireless LAN will also be stolen and accessed at any time.
3. Insufficient user security awareness
Low-grade Wireless LAN often only supports Simple Address binding, address filtering, and encrypted transmission functions. These basic security functions have little protection to prevent illegal attackers. However, some users who are not familiar with wireless networks can quickly achieve mobile office and resource sharing, we often do not hesitate to choose low-end wireless LAN with low networking costs and simple management and maintenance operations. As for the security performance of the wireless LAN, we believe that these novice Internet users will hardly consider it. In addition, the beginner users who are not familiar with wireless networks have less knowledge about network security. These users seldom consciously perform security settings when using wireless networks.
4. Poor anti-external interference capability
During the work process, a wireless LAN usually uses a specific working frequency band. When there are too many wireless networks in the same working frequency band, the signal coverage will overlap, this will seriously affect the strength of valid signals, and may ultimately affect the signal transmission stability of the wireless LAN. In addition, during the transmission of wireless Internet signals, it is particularly vulnerable to block or interfere with buildings such as walls, which will also affect the stability of the wireless LAN. For low-grade Wireless LAN, the anti-external interference capability is even worse. Obviously, such wireless LAN cannot meet the requirements of high-quality network access applications.