WiFi或无线网络连接(Wireless Network Connection)简化了我们家中的网络和互联网(Internet)访问。它支持无线音乐和视频流、文件和打印机共享,以及支持WiFi的笔记本电脑、计算机、平板电脑、手机、智能电视(TVs)、流媒体设备等之间的互联网(Internet)访问和共享。
不再需要 LAN 电缆,因为WiFi 路由器(WiFi Routers)现在提供相同的功能。
不安全 WiFi 的后果(The Consequences Of Unsecured WiFi)
但是,入侵者可以访问和利用同样的无线功能。他们可能是专业的黑客,他们为了恶意而决心访问您的网络,或者您的邻居试图访问您的网络以免费上网以下载视频或音乐。
入侵者可以执行以下任何操作:
- 连接到您的网络以访问连接设备中的私人数据。
- 使用您的Internet连接执行恶意行为。
- 将不需要的视频或音频投射或流式传输到您连接的设备。
- 使用您的Internet资源,从而导致连接速度慢且延迟高。
你显然不希望这些事情发生。因此,这里有 5 种方法来保护您的WiFi连接。
定期更改您的 SSID 和 WiFi 访问密码(Change Your SSID & WiFi Access Password Periodically)
SSID是您的WiFi连接的名称。根据品牌和型号为WiFi路由器提供默认SSID 。(SSIDs)但是,某些品牌和型号存在已知漏洞。
入侵者可以使用默认SSID来识别路由器,然后利用其已知漏洞利用它。但是你可以通过分配一个唯一的SSID(SSID)来隐藏它是什么类型的路由器来减轻这种威胁。
与SSID(SSIDs)密切相关的是WiFi访问密码。为了让任何用户能够访问路由器的无线连接,该用户需要知道您的路由器的SSID及其相应的密码。由于某些路由器知道默认密码(有些甚至根本没有密码),分配新密码将防止入侵者获得未经授权的访问。
但是,没有网络是完全安全的。坚定的入侵者会想方设法通过各种方法获取您的密码。但这些方法通常需要时间、耐心和创造力。
通过定期更改您的SSID和WiFi访问密码,可能已经获得旧WiFi密码的入侵者将不得不再次通过相同的耗时过程来获取您的新密码。最终,如果所需的时间和努力远远超过获得的回报,他们可能会失去兴趣。
将您的 WiFi 路由器放置在安全且具有战略意义的位置(Place Your WiFi Router In a Secure & Strategic Location)
您的WiFi路由器的放置方式应使其信号仅足以服务于您家中的所有区域,而不是超出范围。WiFi信号到达您场所以外的区域,例如街道或隔壁的房屋,会邀请潜在的入侵者尝试访问您的网络。
要控制您的WiFi信号强度,请调整路由器中的传输功率,使其限制在您家的范围内。
此外,您的WiFi路由器应放置在安全的位置。路由器有按钮和端口,可以让入侵者绕过任何安全措施。例如,WPS按钮允许在按下按钮后访问通过(WPS)WPS连接的任何设备。
同样,一些WiFi路由器具有LAN端口,用于向后兼容有线连接,默认情况下是不安全的。防止物理访问WiFi路由器的WPS按钮和LAN端口可以进一步保护您的WiFi。
更改 WiFi 路由器的管理员管理配置文件(Change The Administrator Management Profile Of The WiFi Router )
所有路由器都有一个用于维护目的的管理员配置文件。这些配置文件通常附带工厂发布的管理员用户名和密码。你需要改变它们。
否则,即使在更改了SSID和WiFi访问密码之后,具有WiFi访问权限的入侵者也会留下一个后门开口,以便他们以后使用。(WiFi)
使用 WiFi 路由器管理功能(Use the WiFi Router Administrative Functions)
一些WiFi路由器具有其他有助于提高安全性的功能。
例如,某些路由器通过MAC地址识别显示当前连接到它的所有设备的列表。您可以通过识别的MAC地址手动检查连接的设备,以确定是否连接了未知设备。
其他路由器具有白名单/黑名单功能。这允许您指定哪些设备(基于它们的MAC地址)可以或不能访问您的路由器。
您可能想要控制的另一个管理功能是WPS Pin Entry功能。它允许用户通过输入PIN而不是密码来访问路由器,并且可以被入侵者滥用以获取后门访问权限。
连接到您的 WiFi 路由器的安全设备(Secure Devices That Connect To Your WiFi Router)
连接到您的WiFi路由器的设备通常会将WiFi密码存储在其系统上。这可能是个问题。
对这些设备具有物理访问权限的入侵者可以查看这些存储的密码。为了应对这种威胁,您需要确保所有设备都是安全的。
5 Ways To Secure Your WiFi
WіFi, or Wireless Network Connection, has simplified networking and Internеt access in oυr homes. It has enabled wireless music and videо streaming, file and printer sharing, and Internet access and sharing among WiFi-enablеd laptoрs, computers, tablets, phones, smart TVs, ѕtreaming devices and mоrе.
LAN cables are no longer needed as the same functions are now provided by WiFi Routers.
The Consequences Of Unsecured WiFi
However, it is this same wireless function that can be accessed and exploited by intruders. They can be professional hackers determined to access your network for malicious intent, or your neighbor trying to access your network for free internet to download videos or music.
Intruders can do any of the following:
- connect to your network for access to private data in connected devices.
- use your Internet connection to perform a malicious act.
- cast or stream undesirable video or audio to your connected devices.
- use your Internet resource, resulting in a slow and high latency connection.
You obviously don’t want any of these things to happen. So here are 5 ways to secure your WiFi connection.
Change Your SSID & WiFi Access Password Periodically
SSID is the name of your WiFi connection. WiFi routers are provided default SSIDs according to brand and model. However, certain brands and models have known vulnerabilities.
An intruder can use the default SSID to identify the router and then exploit it using its known vulnerabilities. But you can mitigate this threat by assigning a unique SSID to hide what type of router it is.
Closely related to SSIDs are WiFi access passwords. In order for any user to gain access to a router’s wireless connection, that user will need to know both your router’s SSID and its corresponding password. As some routers have known default passwords (and some even have no password at all), assigning a new password will prevent an intruder gaining unauthorized access.
No network is completely safe though. Determined intruders will find ways of obtaining your password through a variety of methods. But these methods usually take time, patience, and creativity.
By changing your SSID and WiFi access password periodically, an intruder who may have already obtained your old WiFi password will have to go through the same time-consuming process again to obtain your new password. Eventually, they may lose interest if the required time and effort far exceeds the rewards gained.
Place Your WiFi Router In a Secure & Strategic Location
Your WiFi router should be located in a way that its signal is only enough to service all areas of your home and not beyond. WiFi signals reaching areas outside your premises, such as the street or houses next door, would invite potential intruders to try and access your network.
To control your WiFi signal strength, adjust the transmit power in your router so it stays confined within the boundaries of your home.
In addition, your WiFi router should be placed in a secure location. Routers have buttons and ports that may allow intruders to bypass any security in place. The WPS button, for instance, allows access to any device connecting by WPS after the button is pressed.
Similarly, some WiFi routers have LAN ports for backward compatibility with wired connections, which are unsecured by default. Preventing physical access to the WiFi router’s WPS button and LAN ports can further secure your WiFi.
Change The Administrator Management Profile Of The WiFi Router
All routers have an administrator profile for maintenance purposes. These profiles usually have accompanying factory-issued admin usernames and passwords. You need to change them.
Failure to do so will enable an intruder with WiFi access to leave a backdoor opening that they can use later on, even after the SSID and WiFi access password have been changed.
Use the WiFi Router Administrative Functions
Some WiFi routers have other functions that help with security.
For example, some routers display a list of all devices currently connected to it through MAC address identification. You can manually check connected devices through their identified MAC addresses to determine whether or not an unknown device has connected.
Other routers have a Whitelist/Blacklist function. This allows you to specify which devices (based on their MAC addresses) can or cannot access your router.
Another administrative function you might want to control is the WPS Pin Entry function. It allows users to access the router by entering a PIN rather than a password and can be abused by intruders to gain backdoor access.
Secure Devices That Connect To Your WiFi Router
Devices that connect to your WiFi router usually store the WiFi password on their systems. That can be a problem.
An intruder with physical access to those devices can view those stored passwords. To counter this threat, you need to make sure all your devices are secured.