• silicon.com
• Technology
• Security

By Tony Hallett, 4 August 2003 11:56

NEWS With commercial rollouts of Wi-Fi technology in planes fast approaching, users of laptops in cabins - as well as other public places - have been warned about an easy-to-overlook security threat: shoulder surfing. Aircraft giant Boeing is going to great lengths to make sure its onboard Wi-Fi system, known as Connexion, is technically secure. However, the company recognises shoulder surfing is a distinct possibility in such cramped quarters. Responding to questions last week, Connexion by Boeing CTO Bob Dietterle told silicon.com that direct viewing of laptop screens can be dealt with using a security lens or screen overlay. Some are now commercially available and they prevent off-axis viewing of screens. Security experts also point out that users shouldn't have to worry about what's going on over their shoulders. Al Potter, manager of network security at TruSecure's ICSA Labs division, said: "A public place like an airplane, a departure lounge or a coffee shop or other hotspot isn't really an appropriate place to perform sensitive computing tasks." While snooping over someone's shoulder in a plane won't allow files to be copied in the same way as an electronic breach, there are security issues. These are compounded - as with loud public mobile phone conversations - when users of a laptop or PDA in a train, bus or other public place forget they are 'out in the open'. TruSecure recommends filters that can be put over screens - from simple $50 films to customised equipment, giving a limited range of visibility in the same way that seat-back onboard screens already do - and employing a mix of technologies. These include not only installing properly certified personal firewalls and anti-virus software - no-brainers for most IT departments - but also using encrypted email and files wherever possible. Potter's general advice should be taken on board by all business travellers. He said: "Take responsibility for your portable device and its communications. Analyse and be aware of your specific risks and take steps to mitigate them." And the advice holds not just for Wi-Fi. Boeing, which has been working with airlines such as BA and Lufthansa on recent 802.11b airborne trials, said it is looking at other wireless standards, including 802.11 g and a and Ultra Wideband. Connexion by Boeing's Dieterlle added: "We plan to bring these other wireless networks into service when they satisfy our and the regulators' criteria. Until hard data is collected it is premature to speculate that a given wireless technology can or cannot be delivered safely." Boeing's tests move from lab, to screen room, to aircraft on the ground, to aircraft operating in landing mode to DER (Designated Engineering Representative) review and approval and finally to flight trials. Carrier BA recently said it is working on a business case and hopes to make a decision on Wi-Fi (802.11b), as supplied by Connexion by Boeing, by the autumn.