August 15, 2005

McAfee readies home Wi-Fi security tool

Software is designed to keep out others who want to freeload on a broadband Internet connection

All home Wi-Fi gear comes with the bricks and mortar to put up at least a basic security wall against intruders and eavesdroppers, but McAfee wants to sell consumers a better trowel for building it.

The company's McAfee Wireless Home Network Security software automatically sets up encryption keys on Wi-Fi routers and the PCs connected to them and then rotates the keys every three hours, according to Stu Elefant, senior product manager for wireless and new initiatives at McAfee. It will work with older Wi-Fi systems that use the WEP (Wired Equivalent Privacy) encryption system, as well as current equipment that also supports the newer WPA (Wi-Fi Protected Access) and WPA 2 technologies, he said. The software will go on sale online next week and in stores next month.

McAfee's software is designed to keep intruders - either malicious "war drivers" or neighbors who just want to freeload on a broadband Internet connection - from getting on to wireless LANs and from deciphering the packets that travel over the network. Once on a wireless LAN, intruders can steal information, intercept messages and install harmful programs. As consumers rapidly embrace Wi-Fi for their home networks, many are not using any security, usually because they can't figure out how to set it up, according to industry analysts and other observers.

The Santa Clara, California, company isn't alone in trying to attack the problem. Broadcom Corp., which makes the chips used in many popular wireless LAN products, has developed a simplified security setup technology that was introduced in some Cisco products last month and may be coming to other vendors' offerings soon. And the Wi-Fi Alliance, the industry group that certifies Wi-Fi gear, in the first half of next year plans to create a standard for easy security setup that vendors can build in and have certified as a check-off item on their products.

After loading McAfee's software on a PC, users can set up security in a few easy steps, according to Elefant. McAfee uses the standard Wi-Fi security mechanisms, but also produces a stronger key than most consumers can and adds automatic key rotation, he said. The full features of the software work on any PC running Windows 98 Second Edition, ME, 2000 or XP. To use any client with another operating system, the user has to get the automatically generated key and enter it manually, with automatic key rotation turned off.

The software saves consumers from having to log in to the Web browser page of the Wi-Fi router and typically going through a series of settings pages, Elefant said. Once loaded on the first PC, the software detects an insecure wireless LAN nearby and asks if the user wants to protect the network. If they confirm it, the software puts a key on the PC, sets up a secure connection to the router and sets up the same key on the router. To add another system to the network, the user will load the software, and a screen will pop up on any PC that's already on the protected LAN. That existing user can accept or reject the new participant.

McAfee's software needs special code to work with various Wi-Fi routers because they don't all have the same Web interface for setup. The tool works with most of the popular Wi-Fi routers, including models from Cisco Systems Inc.'s Linksys division, D-Link Corp. and Belkin Corp., according to Elefant.

Subscribe to the Security Central Newsletter

The one-stop resource center for IT professionals.

White Paper

CA Security Management Solutions

A comprehensive security management solution can help you streamline, as well as grow, your current or evolving business. In this way, a strategic security approach can help you increase your competitiveness in these challenging market conditions.

Download now! »

White paper

Beyond Compliance: The Significant Benefits of Log Management

Find out how you can effectively collect, normalize and archive enterprise-wide, security-related data that is invaluable for security investigation and compliance reporting.

Download now! »

Webcast

Integrated Identity Compliance: Enabling Cost-Effective Role-Based Compliance

This session focuses on the intersection of role management and identity compliance, and addresses the importance of identity compliance in enterprise governance and the challenges that organizations may face in achieving it.

View now! »
©1994-2009 Infoworld, Inc.