7/29/2019 Broadband Security

1/2

Broadband

Internet

Security

Broadband reers to high-speed network connection

Since broadband Internet is widely used, it is very

important or every citizen to securely confgure it

or sae usage

Traditional Internet services are accessed in

dial-on-demand mode, whereas broadband

Internet is an always-on

connection, thereore security risk is very high

Without our knowledge, computer can be compro-

mised and it

can also be used as a launching pad or carrying out

disrupting activities on other computers

WirelessFidelity(Wi-Fi)

DigitalSubscriberLine(DSL)

AsynchronousDigitalSubscriberLine(ADSL)

VeryhighspeedDigitalSubscriberLine(VDSL)

CableModem

Satellite

BroadbandoverPowerlines(BPL)

TerminalAdapterModem

UniversalSerialBus(USB)

AsbroadbandInternetconnectionisAlwaysOn,

itleadstointentionalmisusethrough

Trojansandbackdoors

DenialofService

Intermediaryforanotherattack

Hiddenleextensions

Chatclients

Packetsning

Defaultcongurationsareextremelyvulnerable

BroadbandSecurityThreats

Anti-socialism groups use unsecured

Wi-Fi networks to send terror e-mails

Prevent your wireless network tobecome such ahot spot by securing it

TypesofBroadbandModem

GuidelinesforSecuringBroadbandIn-

ternetAccess

aAlwaysdownloadbroadbanddriversfromthle-gitimatewebsitesrecommendedbythemanu-facturer.

aRegularlydownloadthermware(drivercode)

Always read themanufacturers manual care-fullyandfollowtheguidelines,whilesettingup

broadbandmodem. Insert thepowersourceinto themodemandthenplugtheotherendofitintothewallsocket.

Beforeconnectingthemodemtothecomputer,checkforproperfunctioningofthecomputer.

Whilesettingupthemodem,followinstructionsspecictothetype&modelofthemodem.

Incaseofsignalviacable,connectthemodemwiththecablewireprovided.

Incaseofethernet,connectthemodemtotheethernetportofthecomputer.

IncaseofUSBconnection,connectthemodemafterthecomputerisproperlyinitialised.

Waituntiltheindicatorson themodemarelit.

Install themodemdriver andassociated soft-wareprovidedalongwiththemodem.

Toinitializetheconnectivitytheproperusercre-dentialsneedtobegivenandresponseshouldbeawaitedbeforeuse.

BroadbandModemSetup

Dos

aAlwaysusethepoweradaptersuppliedbythemanufactureralongwiththemodem.

7/29/2019 Broadband Security

2/2

Alltheaccesspointsandroutersuseanetwork name calledSSID.ManfacturernormallyshipstheirproductswiththesameSSIDset.Asitcanbemisusedbytheattackertobreakintothenet

work/computer,itisneccesarytochangethedefaultSSIDwhileconguringwirelesssecurity.

aIncaseofterminaladaptermodemmakesure that lter isenabled for broadband lines. To

lterunnecessarynoise generatedduring the

transmission.

aAssign Static IP Addresses to Devices:

EverydeviceisprovidedwithanuniqueMACaddress.Broadbandaccesspointsandrouter&provideanoptionfortheusertocombinetheMACaddresseofthehomeequipmentforac-cess.Thisfacilitatestoallowconnectionsonlyfromthosedevices.

Modem routerssupportwirelesssecurity.Usercanselectanyoneprotocolandaprotectionkey.Thesamewirelesssecurityprotocolandprotec-tionkeyhastobeenabledincomputer.

aTurn on (Compatible) WPA / WEP Encryption:

aChange Deault Administrator ( Passwordsand User names) :

In order to allow only authorized access totheequipment,changethedefaultadminstra

tor or admin password of broadband routermodem,asthesedetailsaregivenbythemanufacturerwhicharecommontoallmodemsand

canbemisusedbyanyone.

MostofthehomeusersareallotteddynamicIPaddresses,asDHCPtechnologyiseasytosetup.Thismayevenhelpstheattackerswhocaneasily

obtainvalidaddressfromDHCPpool.ThereforeturnoDHCPoptioninrouteroraccesspointandusexedIPaddressrange.

aEnable Wireless Security:

AllWi-Fienabledmodems/routersupportsomeformofencryptiontechnology,whichhastobeenabled.

aChange the Deault SSID (Service Set Identier):

aEnable MAC Address Filtering:

Many home computers are victims

of cyber criminals

Prevent your computer from becominga victim by securing it

Do not Enable SSID Broadcast:

In Wi-Fi networking, wireless access point orroutertypically broadcaststhe networkname

(SSID)overtheairatregularintervals.Thisfea-turewasdesignedforbusinessesaswellasto

accesspublichotspots.Forahomeuserthisfea-tureisunnecessaryandcanbeanentrypointto

breakintothenetwork.

Do not Enable Auto-Connect to Open Wi-FiNetworks:IncaseifAuto-Connectsettingisenabled,com-puterwithWi-Fiinterfacecanconnectautomat-icallywithoutnotifyingtotheuser.Thismayex-poseourcomputertosecurityrisks.Thissettingshouldnotbeenabledexceptinspeciccases.

Do not leave broadband connectivity open

whenitisnotutilized.

NeverconnecttounkownoruntrustednetworkincaseofWi-Fi.

aThe setup, confguration and the eatures may vary

rom model to model.

aFormoreinformationpleaserefermanufacturers

manual.

Points to be remembered

x

x

x

x

Donts

xDontenabletheoptionforremoteadministration(viaInternet),asitisnotrequiredforahomeuser.

xDontenabletheoptionRestore Factory Default Set-tinginbroadbandmodem.

xDont useconnectionwithouta lterfor eachbroadbandInternetline.

xDonttapthelinebeforethesplitter(asmalldvicethatseparatesphonelinefromdata/PCport).

xDontuseUSBbroadbandmodemwithinsecure

computer/laptop.

GuidelinesforsecuringBroadband

Internetaccess:

aInstallbroadbandInternetbandwidthusagemon-itoringtool.

aUseeectiveendpointsecuritysolution(withantivirus,antispyware,desktoprewalletc)toprotectcomputer/laptopfrombroadbandInternetsecu-ritythreats.

aEnableSSH(securechannel)forremoteadminis-tration.

aEnable Firewall on Modem Router as well asComputer:Broadbandmodemrouterscontainbuilt-inrewall

feature,butthisoptionhastobeenabled.Comput-erconnectedtothebroddbandmodemalsoneeds

tobeprotectedwithdesktoprewall.

aTurn of Modems during extended periods o

Non-Use: Shuttingdown anetworkwill certainly prevent

outside unauthorized people breaking into thenetwork.Sinceitisverydiculttofrequentlyturnonandothedevices,itcanbeconsideredduring

travelorextendedoineperiod.

aIncaseofUSBbroadbandmodem,disconnectandremovethedeviceafterusage.