Skip to main content

Council concerned over low level of awareness of WLAN security - CHOICE # 330

  • 2004.04.15

The switch to wireless Internet access is fast on the rise with household users.

As more consumers are drawn to wireless Internet application, the Consumer Council is concerned that few are in fact aware of the inherent security vulnerability of WLAN (wireless local access network) to hackers' attacks.

A recent study has found 70% of WLAN to be without simple security measures in defence of such intrusion and viruses on the home computer system.

Common attacks on WLAN include Denial of Service (DOS). In a WLAN, the hacker might not steal any information but may send continuous data packets to jam the access point, so that the users cannot access the network service as it is being kept busy by DOS attack.

Another attack concerns illegal access to the home computer system. The hacker may hack into a home computer using wireless device with certain software or hardware.

Also common are Man-in-the-Middle attacks. The hacker may set up an access point placed near an open wireless network (hotspots). When a user associates with this access point, the username and password will be captured by this fake access point to gain access to the network.

Consumers are, therefore, strongly urged to take pro-active preventive measures for enhancing the security of a wireless network. These include such built-in security features as:

SSID (Service Set ID)

  • Change the default SSID immediately after installation
  • Enable the system to operate as a closed broadcasting network

WEP (Wired Equivalent Privacy)

  • Enable the WEP
  • Never use the default WEP keys

ACL (Access Control List)

  • Use MAC filtering if your WLAN access point supports this function

Hotspot service providers should also enhance security protection for wireless internet access by consumers.

The Consumer Council reserves all its right (including copyright) in respect of CHOICE Magazine and Online CHOICE ( https://echoice.consumer.org.hk/ ).