Wireless Network Security

Networking makes it easy to share Internet access and data.  But you wouldn't want to share your information with just anyone.  With a wireless network, your information is traveling through the airwaves—not physical wires, so anyone within range can "listen in" on your network.  Here are essential security measures you should take to secure your wireless network.  

  • Change the default SSID (network name). 
  • Disable the SSID broadcast option. 
  • Change the default password needed to access a wireless device. 
  • Enable WPA/WEP encryption.
  • Enable MAC address filtering.

Change the default SSID
Your wireless devices have a default SSID set by the factory.  The SSID is the name of your wireless network, and it can be anything you wish.  Wireless products often use the product name as the default SSID.  Hackers know these defaults and can try them to join your network.  Change the network's SSID to something unique, and make sure it doesn't refer to the networking products you use.

As an added precaution, be sure to change the SSID on a regular basis, so any hacker who may have figured out your network's SSID in the past will have to figure out the SSID again and again.  This will deter future intrusion attempts.

Disable SSID broadcast
By default, most wireless networking devices are set to broadcast the SSID, so anyone can easily join the wireless network.  But hackers will also be able to connect, so unless you're running a public hotspot, it's best to disable SSID broadcast.

Change the default password needed to access a wireless device
For wireless products such as access points and routers, you will be asked for a password when you want to change their settings.  These devices have a default password set by the factory.  Hackers know these defaults and will try them to access your wireless device and change your network settings.  To thwart any unauthorized changes, customize the device's password so it will be hard to guess.

Enable Wi-Fi Protected Access™ (WPA) Security
Wi-Fi Protected Access (WPA), the latest high-security standard for wireless networking, increases the level of data protection and access control for wireless networks.  WPA provides several benefits to enhance security.  It keeps out unwanted users by checking for the proper permission and password before allowing network access.  It is also more robust than the security standard it is replacing, Wired Equivalent Privacy (WEP), which provides basic protection for home networks and limited protection on public networks.  WPA improves data encryption so attackers will not be able to view or alter any data traveling to or from your wireless network.

WEP uses 64- or 128-bit encryption keys, but WPA offers up to 256-bit encryption keys, which are exponentially harder to decode.  Also, while the WEP key is static, the WPA key is dynamic—it automatically changes as often as you want it to, such as every 50 minutes.  This foils would-be hackers' attempts to figure out the WPA key by eavesdropping on your network traffic.  By the time they can decode your old WPA key, your network has already switched to a new WPA key, so WPA is significantly better than WEP, which uses the same WEP key repeatedly.

There are two different modes of WPA, one for home use and one for corporate use.  The mode most suitable for home use is called the WPA-Personal mode, also known as Pre-Shared Key mode (WPA-PSK).  It's easy to use—just select this mode and enter the same password on every network device to activate WPA security.

The mode most suitable for office use is called the WPA-Enterprise mode, also known as WPA-RADIUS (Remote Authentication Dial-In User Service) mode.  To secure a corporate wireless network, this mode requires each device to be authorized according to a master list held in a special authentication server (usually a RADIUS server).

If you're shopping for wireless products, look for the WPA logo.  The privacy and security of your home or small office wireless network is worth it.   If you already have Wi-Fi certified wireless products, but they don't offer the WPA feature, check the product support website for your wireless devices to find out if there are firmware or software upgrades available.

Enable MAC address filtering
If your wireless products—such as access points and routers—offer it, enable MAC (Media Access Control) address filtering.  The MAC address is a unique series of numbers and letters assigned to every networking device.  With MAC address filtering enabled, wireless network access is provided solely for wireless devices with specific MAC addresses.  This makes it harder for a hacker to access your network using a random MAC address.

There are other security measures you can take as well, but these are the most essential.


Trading Tip:
TD Sequential Indicator
by Howard Arrington

Tom DeMark describes this trading tool as looking for at least nine consecutive closes less than the close four trading bars earlier for a buy setup and at least nine consecutive closes greater than the close four trading bars earlier for a sell setup.   This establishes a context that helps a trader determine whether they should be buying or selling the market.  This tool is designed to anticipate a trend reversal.

The indicator counts the bars in the sell setup and labels the count in blue above the high of the bar.   The down counts in the buy setup are shown in red below the low of the bar.   Ensign's Design Your Own™ study was used to construct the indicator.

This DYO property form implements the Up count.   Line A reads the Bar Close values so that Line B can calculate a 4 bar Momentum of the closes.   This Momentum is stored in Global Variable [4].

Line C tests the Momentum to be above zero, and when this is True, Line D increments the Up counter in GV[1] and shows this count as a marker in Blue in the Color Band Position of Above High 2.

Line E tests for when Momentum is not above zero, and conditionally resets the counter in GV[1] to zero via Line F.

The down count in Red is implemented using the following DYO.   The primary reason a second DYO is used is so the Color Band Position for the marker can be the Below Low 2 selection.

The Momentum from the first DYO is still available in GV[4], and thus does not need to be recalculated.   Line A tests for the Momentum to be below zero, and conditionally increments the down counter in GV[2].   When Momentum is not below zero, Line C and Line D reset the counter in GV[2] to zero.

This example is available as the DemarkCount template and can be downloaded from the Ensign web site using the Internet Services form.

Click this link to learn more about the TD Sequential Indicator.