A Free Educational Resource Created by Carnegie Mellon University to Empower You to Secure Your Part of Cyberspace

War Driving

Driving around with a computer to find and access wireless networks

War driving refers to the act of driving through a neighborhood with a wireless-enabled computer, like a laptop or PDA, and accessing wireless networks associated with houses or businesses. The name comes from "war dialing" from the 1983 film War Games, in which the main character programs his computer to dial every telephone number in a town in order to find other computer systems.

War driving can compromise both confidentiality and integrity because it can allow someone to access and modify private information. As of yet, no clear law specifically prohibits war driving.

For wireless networks, WEP (wired equivalent privacy) was first used to provide confidentiality comparable to that of a traditional wired network, hence the name. It gives an authenticating WEP key to each user, which allows you to transmit or receive encrypted information. Later, WEP became known as providing weak security because available software could break it within minutes, and Wi-Fi protected access (WPA) was therefore introduced.

To use WPA, all the devices communicating on the network need to be configured for WPA. Even if only one networked device is configured for WEP, all other devices will fall back to this less secure encryption method, so that all devices can communicate with each other. All popular wireless equipment supports WEP.

The steps to enable WEP/WPA should be provided with the user's manual that came with your wireless router. It's best to refer to those instructions because routers vary and sometimes also require software installation provided by the router company for your operating system to support the encryption.

Protective Measures

Practices

  • Change your encryption key frequently. If you use WEP encryption, change your encryption key at least once a month.
  • Don't connect to unprotected wireless networks. If you do, it's possible for someone to monitor your Internet usage and even record your passwords.
  • Don't enter passwords on non-secure wireless networks. If you do connect, then do not enter your passwords on sites that don't have the lock symbol at the bottom, which identifies SSL-secured (128 bit).

Settings

References

My home page