Unravelling the flaws of Wireless Networks

At a time when wireless networks have become an integral part of our everyday lives, from homes to offices and public spaces, understanding the vulnerabilities lurking in these invisible waves of connectivity is of paramount importance. As we face the convenience and freedom of wireless networks, we must also face the fact that these networks are not immune to threats.

In this article, we go on a journey to investigate the vulnerabilities that could compromise the security of our wireless networks. We will shed light on the risks associated with these vulnerabilities, ranging from unauthorised access to data compromise. However, we will not stop at simply identifying the problems, but also delve into effective strategies to mitigate these threats.

 

Advantages of wireless network

Mobility within the coverage area

It is true that a wireless network is very convenient because it provides flexibility by allowing users to connect to the network without having to physically connect to a specific location through cables. A wireless connection is especially beneficial for portable devices such as laptops, smartphones or any IoT devices. They provide easy access to the network.

Cost-effectiveness and scalability

Wireless networks offer a cost-effective solution, particularly in scenarios where the installation of network cables is either impractical or expensive, especially inside multi-story buildings. Drilling holes, placing cables in trunks, montaging sockets and many other physical devices across the entire area is more disruptive when compared to the installation of wireless access points. When your network become larger all you need to to is to install another access point. It cost less that expanding wired network

Disadvantages of wireless network and how to mitigate the risk

1. Security Risk

Among the key considerations, it is crucial to note that wireless networks tend to be more susceptible to security threats when compared to wired infrastructure. The radio signals they rely on can be intercepted by unauthorised users, potentially accessible to anyone with the appropriate wireless device.

While it’s true that wired networks can be hacked as well, the process is notably different. Breaking into a wired network requires the attacker to have physical access to the network, including connecting a device, which is difficult to do discreetly and unnoticed. In contrast, wireless networks can be hacked from within the signal’s range, offering attackers a remote and potentially less noticeable means of entry.

In typical home/office settings, the signal range for a standard Wi-Fi router is around 100 to 150 feet (30 to 45 meters) inside the building. Outside the building the signal range can extend anywhere from 300 to 600 feet (90 to 180 meters) or even further under certain circumstances. Factors like interference, obstructions, antenna type or weather conditions affect the signal quality.

As you can see, distance allows an attacker to hack your network while sitting on a bench in front of a building.

How to mitigate security risk

• Proper security protocols will reduce the risk of hacking. Currently we mainly use WPA2. Configure your network with it. You may also come across some routers with the ability to implement WPA3 encryption (the newest and strongest one). However you must remember that to successfully implement WPA3 on the router, all devices connected to it must be compatible with WPA3. If you set your router’s security to WPA3 and your mobile phone does not support WPA3, you may encounter compatibility issues, and your phone will likely be unable to connect to your router. But don’t worry, all routers that support WPA3 also support WPA2. Configure the one that currently works with all your connected devices. As of the day I wrote this article, WPA2 is still commonly used and secure.
• Correct encryption, AES (Advanced Encryption System). When configuring WPA2, you will see the AES encryption option. It can be confusing to distinguish the differences between AES and WPA2. To clarify – AES is an encryption algorithm, while WPA2 is a security protocol that incorporates AES encryption to secure data transmissions within Wi-Fi networks.
• The login credentials for the wireless access point should be complex, ensuring that they are strong and unique. Your password should be at least 12-digits long and meet complexity criteria. Note that you will often see advice that your password should be at least 8-digits long. However, I advise you to use at least 12 digits.
• Do not broadcast your SSID. Make your network invisible. One of the main reasons people should stop broadcasting their SSID is the idea that it adds some level of obscurity to their network, making it less visible to casual users. Of course, an experienced hacker will still see your SSID, but you can complicate a hacker’s life by stopping your SSID broadcasting.
• Regularly update the firmware and software of the wireless access point (if you use such a device in the office). It should be strategically positioned in a physically secure location, often mounted on the ceiling. This placement prevents unauthorised access by making it much more difficult for an attacker to reach, reducing the likelihood of undetected manipulation.
• MAC address filtering. Some people recommend MAC address filtering. You can use that method. This adds a certain level of security, but only in combination with other methods (such as those mentioned in previous points) and for small networks where the dynamics of changes in connected devices is low. MAC address filtering itself is not the most sophisticated security method. I will write an article about it.

2. RFID/Reliability/Stability

Wireless networks are prone to interference from various sources, including electronic devices, microwave ovens, Bluetooth gadgets, neighbouring wireless networks, and more. These factors can adversely affect signal quality and result in signal degradation, along with potential signal loss caused by physical obstacles.

How to mitigate stability problem

• Place wireless network devices as far away as possible from microwave ovens or any sources of microwave radiation. Increasing the physical distance between microwaves and wireless components can help reduce interference.
• Separate RFID Systems. Cross interference often occurs between RFID systems and Wi-Fi or virtual personal area networks, such as Bluetooth. However, it happens only when devices use common or adjacent frequency bands. Keep RFID systems and wireless network infrastructure physically separated.
• Position access points and antennas away from RFID readers and tags to minimise the risk of interference. Consider the layout and environment of your space when arranging these devices for optimal physical separation.
• Utilise Shielding Techniques. Implement shielding techniques to mitigate the impact of RFID signals on the wireless network. This can involve the use of metallic shielding or RFID filters designed to decrease RFID signal strength near wireless network equipment.

3. Range and Coverage

When comparing a wireless network to a wired one, one notable limitation of wireless networks is their range. The coverage area is influenced by factors such as the power of the access point, the quality of the antenna, and environmental conditions. Occasionally, dead spots may emerge, prompting the need for extra access points.

How to mitigate problem range and coverage

Installing wireless access points on the ceiling can be a solid choice, as it offers a central location for signal transmission, resulting in improved coverage. It also reduces the chances of signal weakening due to potential obstacles and interference.

4. Power Consumption

Power consumption issues apply specifically for battery-powered devices. Transmitting data consumes more energy compared to wired technology, which typically leads to a reduction in the battery life of portable devices, ultimately requiring recharging or battery replacement. The issue is primarily encountered by companies that utilise multiple access points, rather than being a significant concern for home users.

How to mitigate problem with power consumption

• Utilising power management techniques (if the access point is equipped with them). These techniques aim to optimise energy usage through mechanisms like sleep modes, dynamic power scaling, and scheduled power-saving settings. Additionally, maximising efficiency involves employing power-saving features on devices connected to the access point.
• Adjusting the transmission power levels of each access point to align with the coverage requirements within the environment. While higher transmission power can extend signal range, it may not always be necessary and can lead to excessive energy consumption.
• Staying updated to the latest wireless standards and technologies, including firmware updates. Wi-Fi 6 (802.11ax) introduced features like Target Wake Time (TWT), enabling devices to negotiate specific intervals for data transmission. This innovation contributes to reducing power consumption.

5. Bandwidth Limitations

Wireless networks inherently possess more limited bandwidth than wired network, which has an impact on data transfer speed and overall network performance. As the quantity of connected devices rises, the available bandwidth may result in connections slowing down and reduced throughput.

How to mitigate problem with bandwidth limitations

• Implementing Wi-Fi 6 (802.11ax) is highly recommended as it can substantially boost the available bandwidth in your wireless network. Wi-Fi 6 introduces advanced technologies like Orthogonal Frequency Division Multiple Access (OFDMA) and Multi-User Multiple Input Multiple Output (MU-MIMO), which enhance the network’s capacity and efficiency, resulting in higher throughput and improved performance.
• Consider the practice of channel bonding, where multiple adjacent channels are combined to create a broader channel, thereby increasing bandwidth. However, it is essential to perform it carefully to prevent interference with neighbouring networks. Employing a network analyser tool can help in that process.
• Backhaul connection of your access points. This approach minimises wireless backhaul traffic and optimises available wireless bandwidth for client devices, potentially enhancing overall network performance. I will write an article about it.
• Implement Quality of Service (QoS) mechanisms to prioritise specific types of network traffic. This ensures that critical applications or high-priority traffic (e.g., video streaming or VoIP) receive sufficient bandwidth, while lower-priority traffic doesn’t occupies network resources during critical times.

6. Susceptibility to Congestion

Wireless networks function within designated frequency ranges, and as the number of connected devices increases, these shared frequency bands can become congested. This congestion can result in diminished network performance and a decrease in data transfer speeds.

How to mitigate congestion problem

Choosing the optimal channel – Most wireless access points typically provide the option to manually select their operating channel. By picking a less crowded channel, you can minimise the likelihood of interference from neighbouring wireless networks. To identify the least congested channels in a specific area, use a wireless network analyser tool.