<?xml version="1.0" encoding="iso-8859-1"?>
<!DOCTYPE artikkel
        PUBLIC "-//infoweb.ntnu.no//DTD Infoweb 1.0 //NO"
        "http://infoweb.ntnu.no/infoweb.dtd">
<artikkel spraak="en">
  <tittel>How secure is the wireless network at NTNU?</tittel>
  <forfatter>overhold</forfatter>
  <sammendrag>Security information for the wireless network at NTNU.</sammendrag>
  <lenker>
    <infoweb aid="142" tittel="Generelt om det trådløse nettverket ved NTNU"/>
    <infoweb aid="146" tittel="Oppsett av trådløst nettverk med Windows 2000"/>
    <infoweb aid="247" tittel="Oppsett av trådløst nettverk med Windows XP"/>
    <infoweb aid="288" tittel="Oppsett av trådløst nettverk på Linux"/>
    <infoweb aid="222" tittel="More about VPN"/>
  </lenker>

  <hoveddel>

    <os2>Wireless networks are unsecure</os2>

    <avsnitt>There is a general opinion amongst people that 
      <uthev>wireless networks are unsecure</uthev>, and should not be used when
      transmitting sensitive information. This opinion is helped by different
      articles is news and media.
    </avsnitt>

    <os2>Background for this perception</os2>

    <avsnitt>Wireless networks transmit data as radio signals. These signals can be
      intercepted and theoretically processed and understood by anyone who is within
      distance of the transmitter. Because of this <uthev>wireless networks are open
	for everyone</uthev> with a wireless network card. This makes it quite easy
      for dishonest users to <uthev>listen</uthev> to data that is transmitted and capture
      <uthev>passwords, account information and other sensitive information</uthev>.
    </avsnitt>
      
    <os2>Solutions for achieving security</os2>

    <avsnitt>Fortunately there are several ways to make a wireless network secure. One
      of these engages encryption, by means of <uthev>WEP</uthev> (Wireless Encryption
      Protocol). The signals between the base station and the client are
      <uthev>encrypted</uthev> with a shared key.
    </avsnitt>

    <avsnitt>WEP has, unfortunately, a couple of <uthev>negative aspects</uthev>, which make
      this solution <uthev>far from ideal</uthev>. The encryption is relatively weak, so
      <uthev>breaking the key</uthev> is quite simple. This gives you a false sense of
      security. An other aspect with WEP is the key, which has to be known by both the base
      station and the client. <uthev>Administration and allocation of the keys</uthev> is
      a problem.
    </avsnitt>

    <avsnitt>Another solution for achieving a secure wireless network is to use
      <uthev>Access lists</uthev>. This requires that all computers, which want to use the
      wireless network, have to be <uthev>registered before they can use the network</uthev>.
      This solution has a couple of problems too. Administration of the access lists is one of
      them. It is also possible for clients to use a <uthev>fake identity</uthev> to gain access
      to the wireless network.
    </avsnitt>

    <os2>NTNU's solution</os2>
  
    <avsnitt>Due to the problems with the solutions mentioned above NTNU has chosen a different
      solution. NTNU uses a solution which demand some extra resources, but is much 
      <uthev>more secure than the other solutions; VPN</uthev>. This solution demands that
      clients, which want to access the wireless network, have to <uthev>authenticate themselves
	with the username and password</uthev>. All data transmitted is <uthev>encrypted with
	a strong algorithm, which is very hard to break</uthev>. You can read more about this at <infoweb tittel="VPN - Virtual Private Network" aid="222">VPN</infoweb>. 
    </avsnitt>

    <os2>Resulting security</os2>
    <avsnitt>VPN provides a high degree of security, so <uthev>wireless network connections 
	are at least as secure as network connections through cable</uthev>. So you do not
      have to worry about security.
    </avsnitt>

  </hoveddel>
</artikkel>
