Wireless Security GSM, LAN and Wi-Fi Networks

GSM phones use encrypted technology that enables secure voice and data transfer during calls. GSM technology uses an algorithm to ensure the authenticity of the caller and the integrity of the channel, even when you are

roaming in a foreign country.

The most interesting, and potentially contentious area of wireless security is that concerning wireless LANs or Wi-Fi networks, these are fast becoming the connection method of choice. Wireless signals do not recognize

corporate or geographical boundaries and are only limited by the propagation configuration of the network. Even in an office environment you will find small areas or "blind spots" where the coverage is very weak or non-

existent. So, it is possible for the random surfer to "happen upon" on someone elses network. How can one protect against this happening?

Wireless local area networks use spread-spectrum technology - a technique that makes the radio signals difficult to intercept. Most Wi-Fi systems also include a form of user logon and password protection. Of course, the

spread spectrum signals can be intercepted with a relatively simple wireless card and many networks do not properly set up the password feature and will allow ready access to anyone. The fact that "employees" have to go

through some form of physical security before they can access the network only adds to the notion that wireless networks may not be as secure as equipment manufacturers would have us believe.

The problem with wireless security is essentially a technical issue with the way the signals are encrypted. The original wireless LANs (WLANs) used the Wireless Encryption Protocol (WEP). This was then replaced in late 2002

with the Wi-Fi Protected Access (WPA). Essentially, WPA offered improved data encryption through the use of temporal key integrity protocol (TKIP). The TKIP feature scrambles the keys using a hashing algorithm and

ensures that the keys have not been tampered with. WEP only uses a static key that is seldom changed by users. This cryptographic weakness caused many of the security breaches in WLANs because intruders could, with

relative ease, generate an encryption key and access a wireless network.

While WPA offers enhanced security features over WEP, not all industry observers are completely satisfied. A recent problem was highlighted with WPA concerning the use of poorly chosen passwords for a network. Criminals

intent on compromising a WLAN can use simple dictionary software to overcome the system password. In fairness, this weakness only manifests itself when short, text-based keys are used and does not signify a fault in the

WPA protocol. WLAN manufacturers can circumvent this problem by incorporating the ability to generate random keys across the network and putting in place user requirements concerning the length and style of passwords.

Microsoft responded to this potential threat by providing a Windows XP download that alters the way the operating systems communicates with the Wi-Fi network - using separately generated keys for each system user rather

than one, albeit encrypted, key for the network connection.