Aka: Securing Wireless and Mobile Devices

1
NOTFor Your Eyes Only

• Aka Securing Wireless and Mobile Devices

Gregory Anderson Multimedia Technology Specialist
(aka geeeek!) Office for Student Computing
Resources (OSCR) Kelley Bogart, CISSP Senior
Information Security Specialist University
Information Security Office
2
Goals

• Wireless Security for non-IT folks!
• Attendees should leave knowing
• The importance of encryption
• How and why to use UAWiFi, not UAPublic
• Avoiding evil twins
• How to encrypt yourself on public wireless
  networks using VPN software
• Eight ideas for securing your home wireless
  network
• Some suggestions for securing mobile devices
• Where to find additional resources

3
Part IWireless Security Background Information
4
Wireless is BROADCASTING!

• Wireless has a broadcast frequency!
• WiFi has range
• Anyone else in range, tuning in to the same
  frequency, using the right software, can listen
  to your broadcast.

5
Evil Twins
6
Secure Broadcasts Require Encryption
7
Part IIWireless Security on the University of
Arizona Campus
8
Why UAWiFi and not UAPublic?
Meant for visitors

• Security (WPA2)
• Speed (no bandwidth limitations)
• Convenient (no port limitations)

• Easy to Connect
• Not Secured
• Limited Access

9
Getting connected to UAWiFi

• http//uawifi.arizona.edu

10
Important Wireless Settings
11
UAWiFi Campus Coverage
12
Part IIIWireless Security at Home
13
Eight Recommendations

• Change Password
• Turn on WPA Encryption
• Change Default SSID
• Disable SSID Broadcasting
• Enable MAC Address Filtering
• Enable Firewalls
• Position Wireless Router Wisely
• Turn Network Off When Not In Use

14
Example Linksys
15
1. Change Password
16
2. Turn On WPA Encryption
17
(No Transcript)
18
3. Change Default SSID
19
(No Transcript)
20
(No Transcript)
21
4. Disable SSID Broadcasting

• You get the point, eh?
• Starting points on the internet for various
  wireless router manufacturers
• Linksys
• Netgear
• D-Link

22
Part IVwireless security in public places
23
use of Open Access Wireless

• Airports
• Hotels
• Conferences
• Free WiFi Hotspots
• Coffee Shops
• Bookstores

24
Wireless - Other

• Use UAs sitelicensed VPN
• http//sitelicense.arizona.edu/vpn
• https//vpn.arizona.edu
• Limit what you do when connected
• Do not access anything sensitive unless the
  website is secure

25
Security on Mobile Devices

• Install anti-virus software
• Install all security patches
• ALWAYS password protect your device
• Do not access anything sensitive unless the
  website is secure
• Do not use remember or save password option
• Do not click on links in emails or IM

26
Campus Resources

• http//uawifi.arizona.edu/
• Campus wireless network homepage
• (includes coverage map troubleshooting)
• http//oscr.arizona.edu/wireless
• OSCRs website with setup instructions for
  UAWiFi on most platforms
• http//sitelicense.arizona.edu/vpn
• Free campus VPN software
• https//vpn.arizona.edu
• Web-based SSL VPN
• http//the247.arizona.edu/
• More technical support!