Security Measures (cont.)

WPA

WPA stands for WiFi protected access. Though WPA is not technically part of the 802.11 standard, it is based on it. WPA was intended as an interim solution for Windows XP users, which fixes many of the holes in WEP, while maintaining backward compatibility. Not all wireless access points have WPA available as an option. In many cases, a simple firmware update can give you this option. You may also need to download an update for Windows XP.

WPA changes how packets are encrypted, by using a new feature called TKIP (temporary key integrity protocol). TKIP fixes the hole in WEP that allows attackers to analyze the data packets and derive the key over time.

If you have the ability to use WPA instead of WEP, it is generally recommended that you do so. WPA currently gives the greatest level of security you can get on a wireless network. Not all devices are WPA compatible, so you'll need to be sure they are before you begin configuring a network for WPA access.

MAC Address Filtering

The MAC (Media Access Control) address (also known as the hardware or physical address) is a unique value associated with a specific network adapter. The MAC address is assigned at the hardware level and cannot be changed, so using MAC address filtering can be extremely effective in network security.

When MAC address filtering is not enabled, any network device can effectively join the network; so long that it passes any other security checks that have been set up. By obtaining the MAC address of every network device you wish to use, you can create a master list in your network router that only allows these particular addresses to join the network. When MAC address filtering is enabled, your router will be like a bouncer at a club, not allowing any network adapter join if it is not "on the list".

Since MAC address filtering is assigned at the hardware level, it cannot be changed. However, a determined and skilled hacker can use software to spoof the MAC address, thus making it look like an approved device. However, the threat of such a hacker trying to break into a home network is minimal.