Tuesday, December 6, 2011

Internet Wi-Fi Security

12.06.11: This item is only for those wi-fi Internet users who have heard about WPS.


The organizations promoting Internet security has attempted to provide a simpler approach for the non-techie Internet users (99.5% of Internet users).


The simpler approach means you do not need to know how to set up encrypted protocol (WPA or WPA2) in order to secure your home network from hackers (anyone trying to use your Internet wireless access).


Unless you are really keen to employ this approach, I suggest it is not worth the effort.


Instead, ask someone to help you set your WPA or WPA2 encryption, write down the password, and forget it ... until a friend shows up with a smartphone or laptop and wants to use your wi-fi while visiting. Then, remember where you placed the piece of paper with the password.


Here is a detailed description:



WPS (Wi-Fi Protected Setup) was introduced and developed by the Wi-Fi Alliance to help standardize and simplify ways of setting up and configuring security on a wireless network. Traditionally, users would have to manually create a wireless network name (SSID), then manually enter a creative, yet predictable security key on both the access point and the client to prevent unwanted access to their wireless network.
This whole process requires the users to have the background knowledge of the Wi-Fi devices and the ability to make the necessary configuration changes. WPS was introduced to relieve and remove all of the guesswork of securing a wireless network by typing a short PIN (numeric code) or pushing a button (Push-Button Configuration, or PBC).
On a new wireless network, WPS will automatically configure a wireless network with a network name (SSID) and strong WPA data encryption and authentication. Wi-Fi Protected Setup is designed to support various Wi-Fi certified 802.11 products ranging from access points, wireless adapters, Wi-Fi phones, and other consumer electronics devices.
Advantages of WPS
  • WPS automatically configures the network name (SSID) and WPA security key for the access point and the WPS enabled client devices on a network.
  • You do not need to know the SSID and security keys or passphrases when connecting WPS-enabled devices.
  • No one can guess or figure out your security keys or passphrase because the keys will be randomly generated.
  • No predictable passphrases or long sequences of hexadecimal to enter
  • Information and network credentials are securely exchanged over the air using the Extensible Authentication Protocol (EAP), one of the authentication protocols used in WPA2.
  • WPS has been integrated and supported in Windows Vista (currently, Windows Vista only work in Registrar mode)
Disadvantages of WPS
  • It does not support “Ad-Hoc” mode or network where wireless devices are communicated directly to each other without an access point.
  • All of the Wi-Fi devices on the network must be WPS certified or WPS-compatible, otherwise you will not be able to take advantage of the ease of securing the network.
  • Difficult to add a non-WPS client device to the network because of the long sequences of hexadecimal characters generated by the WPS technology.
  • This technology is fairly new, so not every vendor will support the WPS technology.
Facts about WPS
  • WPS is a non-proprietary specification that will be a certified technology controlled by Wi-Fi Alliance.
  • WPS is an optional certification program for Wi-Fi Certified products.
    • Not all Wi-Fi Certified products will include WPS support, users need to look for the Wi-Fi Protected Setup logo or term on the products to ensure that the product is WPS compatible.
  • There are 2 primary methods used in the Wi-Fi Protected Setup:
    • PIN entry – a mandatory method of setup for all WPS certified devices
    • Push button configuration (PBC) – an actual push button on the hardware or through a simulated push button in the software. (This is an optional method on wireless client).
  • If you are using the PIN method, you will need a Registrar (access point/wireless router) to initiate the registration between a new device and an active access point/wireless router. (Note: The PBC method may also need a Registrar when used in a special case where the PIN is all zeros)
  • WPS is NOT a new security feature – it makes the existing security features easier to configure.
If, after reading/digesting all of the above information, you would like to set it up, I will gladly assist.

No comments:

Post a Comment