Kaspersky Internet Security 2015

Risks of using public Wi-Fi networks

• In public networks, data may be transferred unencrypted, which makes your sensitive information (for example, passwords, logins, instant messages) available to cyber criminals. As a result, intercepted email addresses may be used for spam mailings, or the contents of your social network page may be changed.
• To intercept data, a hacker only needs to be within the range of the wireless network (unlike situations with cable networks when a physical connection is required).
• When a password is sent in clear text (using the GET method), all information of the form is transferred as a part of the URL, for example: http://example.com/script.php?login=user&password=12345678. Thus your password is discovered easily.

Please note: a password-protected wireless network is vulnerable if the hacker knows the password (for example, a password-protected network in a cafe, with the password written on the wall).

Types of attacks on public wireless networks

Types of attacks on public wireless networks

• Sniffing. Interception of data (emails, photos and videos, logins and password) by a hacker within the range of the wireless network.
• Sidejacking. Concealed interception of identification files that may be used for any actions with the website (for example, changing passwords, sending messages, uploading files etc.).
• Evil Twin/Honeypot. Information about your activity is intercepted by the hacker because you are connected to the hacker's wireless network.

Wireless network protocols

The WEP and WPA protocols are considered vulnerable, unlike WPA2 (both Personal and Enterprise).

How to protect data

• Disable shared file and printer sharing service for all public networks you connect to. For instructions, click a link that refers to your operating system:
  • Windows 8 or 8.1
  • Windows 7
  • Windows Vista
• Avoid sending and receiving sensitive data (for example, credit card numbers) over public Wi-Fi networks.
• When working with confidential data (passwords, documents, bank details etc.), use the HTTPS protocol or a VPN.

Wireless network protocols

WEP and WPA protocols are considered vulnerable. However, WPA2 (Personal and Enterprise) is considered secure.

Risks of using insufficiently protected home Wi-Fi network

• Probability of the hacker's accessing your computer and confidential data (logins, passwords, credit card numbers, electronic wallets, etc.).
• Unauthorized usage of your network traffic.
• Probability of damaging your Wi-Fi router (for example, by changing the device firmware).

If you are using WPA2 with a strong password, unique SSID and with WPS, you are minimizing the risk.

Risk of using popular SSIDs

SSID (Service Set Identifier) is the network name that is available to those searching for wireless networks. Examples of popular SSIDs: Home, ASUS.

To restore the password of a network with SSID, a rainbow table can be used. Rainbow tables store the lists of all possible passwords for each user. In case of unauthorized access to the list, the hacker gets all user passwords.

For better protection of your home Wi-Fi network, use an unpopular SSID.

How to protect your home wireless network

To protect your home network, follow these steps:

Step 1. Disable WPS (Wi-Fi Protected Setup) on your router

For instructions on how to disable WPS (Wi-Fi Protected Setup), see the manual provided by the vendor of the router.

Step 2. Change the password and the Wi-Fi network security protocol on your router

Change the password and the security protocol in the following way:

1. Learn the model and the vendor of your device.
2. Download the user manual for your router from the vendor's official website.
3. Connect your router's control panel using the web browser.
4. Find the menu item Manual setup / Advanced settings / Additional settings / Wireless network (the exact item name depends on the vendor and the device model).
5. Select the item that may be named Wireless network security / Security settings /Wireless Security (the exact item name depends on the vendor and the device model).
6. Select the WPA-Auto-Personal/WPA2-PSK security protocol and change the network security key by following the password security guidelines.
   

Step 3. Change the key and the security type of the Wi-Fi network

1. Open the Control Panel in your operating system:
   • Windows 8
   • Windows 7
   • Windows Vista
2. In the window with all Control Panel elements, click Network and Sharing Center.

3. In the left part of the Network and Sharing Center, click the link Change adapter settings.

4. In the Network Connections window, double-click the Wireless network connection icon.
5. In the Status window, click the Wireless properties button.
6. In the Wireless network properties window, go to the Security tab.
7. Select the WPA-Personal security level and change the network security key by following the password security guidelines.
8. Click OK.
9. Close the Wireless Network Connection Status window.

Please note: after you have changed the settings of your home Wi-Fi network, devices will be unable to connect it automatically, so you will need to reconnect them. To learn how to do it, click a link that refers to your operating system:

• Windows 8
• Windows 7
• Windows Vista

To enable or disable notifications of vulnerabilities in Wi-Fi networks, follow these steps:

1. Open the Settings.
2. In the left frame, go to Protection Center and select Firewall.

3. In the Firewall view, select or cleat the checkboxes:
   • Notify of vulnerabilities when connecting to Wi-Fi network.
     Kaspersky Internet Security 2015 will be displaying notifications whenever a vulnerability is discovered.
   • Block and warn about insecure transmission of passwords over the Internet.
     Kaspersky Internet Security 2015 will prevent password transmission in an insecure network.

4. Close the application window.