Archive for September, 2000

Wireless Networking

What are WLANs?

WLAN (or WiLAN) is an acronym for Wireless LAN. A Wireless LAN is a local area network which enables a computer to act as if it is on the physical network yet have no network wires attached to it.

The topic is hot, because wireless network cards are becoming ever more affordable, and one type of wireless networking has achieved shared Ethernet speeds. This means that it is now conceptually possible for one to walk down the hall from one’s office to a conference room while carrying one’s laptop computer and remain online all the while.

What is the UC Irvine campus policy on wireless networking?

Campus policies for the existing campus data network apply to extensions of that network also, including wireless networks. NACS manages UCInet (the campus data network) on behalf of UCI, and is responsible for strategic planning, maintenance, and 24/7 operation of it. It is clear that wireless networking will have an impact on UCInet network planning and operations, and that NACS will need to provide guidelines regarding aspects of wireless networking not covered by the existing policies.

Wireless, however, adds a new level of complexity. WLANs create new security risks for all network users when placed in or near areas accessible to the public. Also, if departments deploy local Wireless solutions, there is the potential that “air space” conflicts may result in unintentional interference by one department in another department’s efforts. Local solutions might also prove incompatible with a campus-wide solution which was implemented at a later time.

To forestall problems that could be created by early adopters of this important and exciting new technology, NACS is coordinating with departments for whom implementing Wireless solutions is a priority.

NACS is working on a method of authenticating users centrally for public networks. In the meantime, NACS recommends use of the built-in MAC address authentication features of wireless access points. We also encourage departments to contact NACS (nacs@uci.edu or x6116) for help in understanding the issues.

A full discussion of this issue and UCI plans for deploying and supporting wireless technology can be found athttp://www.nacs.uci.edu/doc/wireless.html

New Electronic Educational Environment Workshops

Electronic Educational Environment’s (EEE’s) new Internet Web Design workshop has been a great success in assisting faculty with their course web pages. In this workshop, instructors learn the principles of effective web page layout and design that enhance organization and presentation of instructional materials. The topics covered include establishing layout and navigation, effective use of typography and color, using graphics and images on the web, utilizing tables in design, and an introduction to frames.

Individuals who are interested in taking this workshop can attend every 3rd and 8th week of each quarter. To sign up and view the available workshops, go to http://e3.uci.edu/workshops/

UCI EEE staff also is available to meet with individuals on a one-on-one basis or to teach the workshop for specific departments. To make an appointment or to schedule a workshop within a department, send e-mail to eee@uci.edu.

Computer Security

NACS Distributed Computing Support has developed software to improve campus computer security.

In the same way a night watchman proceeds through a building, turning doorknobs to check that they’re locked, hackers scan the network looking for open ports on computers. The new NACS system collects and analyzes information from UCI Unix and Linux computers to check for activity indicative of possible misuse or attempted misuse.

This system is modeled on security features integral to Linux, and delivered to other Unix systems on campus through NACS’s autoinstall software. It depends on modified network applications (such as telnet and ftp) which are often used for compromising system security. These modified applications report to NACS’s logging system whenever they are used. Certain patterns of use are clues that a particular system may need attention.

Intrusion efforts which can be caught by this system range from the simple-minded (probing for improperly secured network ports) to some very sophisticated kinds of attacks (e.g., “buffer overflow” exploits). While the only way to guarantee a computer is safe from network-based attacks is to remove it from the network, this new system represents another way NACS is making it harder to cause harm to UCI computers.