How to Fortify Your Connection

Any CSO knows corporate LANs are inherently more secure than public Wi-Fi. She also knows that proprietary or confidential information probably passes over Wi-Fi networks every day.

Employees connect to hot spots in airports and hotels while on business travel, they access the Internet through their home router while working from home and they use public Wi-Fi to check company e-mail while taking a coffee break at Starbucks. It’s essentially impossible for anyone in today’s business climate to completely avoid public networks. But there are things you and your employees can do – a combination of awareness, education and policy – to mitigate the risk and keep your company’s IP safe.

Public Wi-Fi users face two dangers:

Sniffing: “If you’re connected to an open wireless network and not using a sophisticated authentication or encryption scheme, anyone in the vicinity could [potentially] see what you’re transmitting,” says Amit Sinha, CTO at Web security and monitoring vendor AirDefense. For example, according to Sinha, if you’re checking e-mail without a high layer of encryption like HTTPS or SSL, hackers have the ability to capture those wireless packets and recreate the e-mails you’re sending back and forth. Encryption makes it almost impossible for someone to decipher that information, but for the majority of hot spots, unencrypted transactions are the norm.

Phishing: Public Wi-Fi is a breeding ground for the act of wireless phishing, says Sinha, thanks to an attack known as an “evil twin.” In this scenario, someone forces connections to a wireless network that looks legit but isn’t. A hacker could use wireless phishing tools like HotSpot or Karma to become a man in the middle and intercept communications from other computers, says Sinha.

These threats are pervasive, according to Ken Dulaney, a vice president and analyst at Gartner. There’s not much you can do to authenticate and encrypt on a public Wi-Fi network because you don’t control the access point. But you do control the endpoint. Taking a few general precautions will keep you safe, say Dulaney and Sinha.

Make sure laptops are properly patched. Keep antivirus systems running and up to date. Enforce use of use of a VPN. This will ensure that the information being transferred over the network is encrypted and undecipherable to potential sniffers.

If you take these preventive measures, there should be little problem with Wi-Fi, says Dulaney.

Finally, remind employees to secure their home networks. Since the home access point and network belong to them, they can set up proper encryption mechanisms, like Wi-Fi Protected Access (WPA).