Sunday, December 23, 2007

10 tips for improving your wireless network

1. Position your wireless router (or wireless access point) in a central location.

2. Move the router off the floor and away from walls and metal objects (such as metal file cabinets).

3. Replace your router's antenna.

4. Replace your computer's wireless network adapter.

5. Add a wireless repeater.

6. Change your wireless channel.

7. Reduce wireless interference.

8. Update your firmware or your network adapter driver.

9. Pick equipment from a single vendor.

10. Upgrade 802.11b devices to 802.11g


Extend the range and the strength of your wireless network

Tuesday, December 18, 2007

Top 5 VoIP vulnerabilities caused by poor network security

Sierra VIPER Lab released what it believes are the top 5 VoIP vulnerabilities in 2007.
  1. Remote eavesdropping of VoIP phone calls, a practice that is exponentially easier in VoIP than with traditional PSTN telephone networks, and which represents a major breach of enterprise communications and security.

  2. VoIP Hopping, one of the enablers of remote eavesdropping, but more critically compromises VLANs, that were previously trusted as providing VoIP security, by enabling a PC to mimic an IP phone so hackers can access VoIP systems.

  3. Vishing, the practice of VoIP phishing, which enables hackers to spoof caller ID and present a fraudulent phone identity, causing some consumers to share sensitive, personal information, such as credit card numbers, with hackers masquerading as banking representatives.

  4. Toll fraud, which allows unauthorized users to access enterprise VoIP networks and make calls, increasing VoIP costs and traffic. While there was a much publicized case in 2006, when the FBI charged two men with accessing VoIP networks and reselling minutes to unsuspecting "customers," toll fraud continues unabated, especially on VoIP networks with little authentication or call analysis.

  5. The Skype worm, originally known as the w32/Ramex.A virus, spread via IM, which automatically stops access to security tools while it downloads to infected PCs, and changes the Skype user's status to "Do not disturb" so that other users cannot contact the infected user.
Source: Top 5 VoIP vulnerabilities in 2007, Help Net Security, 14 December 2007