Security of the Rural Communications Broadband Wireless Network

Sep 05 2010

Support Center » Knowledgebase » Security of the Rural Communications Broadband Wireless Network

	Security of the Rural Communications Broadband Wireless Network

Solution Because the Internet is a shared resource, it is not a completely secure medium. In order to enhance your Internet experience with Rural Communications, we have taken the following steps to reduce the risks of Rural Communications Broadband Wireless customers:

• We use reasonable efforts to monitor activity on our wireless network to maintain its performance and integrity.
• We provide information and links to various products that can enhance your protection and make your Internet experience more enjoyable

Our Broadband Wireless is transmitted over a direct sequence spread wireless spectrum. This band of the spectrum is not shared by any other service and requires our wireless modem, antenna and related software to acquire service.

With the increased reliance on Wireless networks, businesses are increasingly more concerned about network security. Companies need to provide customers with freedom and mobility without offering intruders access to the wireless network or the information sent and received on the wireless network.

With our wireless network, transmitted data is broadcast over the air using 900mhz radio waves. This means that our clients within an access point (AP) service area can receive data transmitted to or from the access point.

Because of this security concern, we have deployed several layers of defense across the network. Securing our wireless network is just one component of the overall enterprise security framework. Other components, including firewalls, intrusion-detection systems, and segmented networks, have been deployed as part of the network design in addition to WLAN security.

As with our traditional networks, security for our wireless network focuses on access control, encryption and privacy. Robust access control prevents unauthorized users from communicating through APs, the wireless endpoints on the switched network that link clients to our internal network. Strong wireless access control ensures that legitimate clients associate with trusted, rather than "rogue" APs. Use of the builtin 900MHZ wireless privacy and a proprietary operating system ensures that only the intended audience understands the transmitted data. The privacy of transmitted data is protected when that data is encrypted with a key that can be used only by the intended recipient of the data.

Traditional security includes the use of Media Access Control (MAC) authentication. This combination offers a rudimentary level of access control and privacy. A MAC address is a common network name for the devices in a network system; it serves to logically segment that subsystem. MAC level authentication prevents access by any client device that does not have the associated MAC address preprogrammed.

In comparison, a 2.4 GHZ AP broadcasts its SSID in its beacon. Even if broadcasting of the SSID is turned off, an intruder or hacker can detect the SSID through sniffing.

With our MAC level authentication, the AP sends the client device a challenge text packet that the client must then encrypt with the correct MAC address and return to the access point. If the client has the wrong key, MAC adrress or no MAC Address, authentication will fail and the client will not be allowed to associate with the access point.

With the MAC level authentication, even if a client can complete authentication and associate with an AP, the use of access control on the AP prevents the client from sending data to and receiving data from the AP, unless the client has the correct 900MHZ frequency and MAC address.

If a device is lost or stolen, the possessor of the stolen device can access the wireless network. An administrator won't be able to detect that an unauthorized user has infiltrated the wireless network, until and unless the theft is reported. The administrator must then change the MAC address key on the AP associated with that client.

General Recommendations
One of the most vulnerable elements in network communications is the individual computer. Rural Communications recommends that you observe the following general practices to enhance the safety of your computer systems and the enjoyment of your Internet experience:
• Incorporate a firewall, anti-virus protection and content filtering software into your system or network.
• Shut off your computer when it is not in use. This will limit the amount of time that you are exposed to potential attacks.
• Disable or password-protect the file or print sharing services for your operating system.
• Set good passwords to protect your system, programs and files. Passwords should be easily remembered by you and contain a mix of at least six letters and numbers. Passwords should not use common words from the dictionary, your name, family members' names, birth dates, social security numbers or any other information that can be easily looked up or guessed.
• Configure the security levels for your browser. (If using Internet Explorer, click Tools|Internet Options|Security. If using Netscape, click Communicator|Tools|Security Information|Navigator.)

Article Details

Article ID:

Created On:

Nov 16 2005 01:02 AM