如何提高Wi-Fi路由器的安全性？

Chances are that when you bought a Wi-Fi router, you probably did not prioritize strong network security.

在購(gòu)買(mǎi)Wi-Fi路由器的時(shí)候，你很可能不會(huì)優(yōu)先考慮強(qiáng)大的網(wǎng)絡(luò)安全性。

After all, when we think about wireless connectivity in our homes, most of us generally care more about speed of data transmissions and how much range the router can cover.

畢竟，當(dāng)我們?cè)诳紤]家里的無(wú)線連接時(shí)，大多數(shù)人基本上都會(huì)更加關(guān)心數(shù)據(jù)傳輸?shù)乃俣纫约奥酚善鞯母采w范圍。

But it’s time to change our views. Network security needs to be high on our list of considerations because a Wi-Fi station is the gateway for devices to get on the internet. If your router is infected with malicious software, all your internet-connected devices become vulnerable, including your smartphone, computer, smartwatch, television and Amazon Echo.

但現(xiàn)在是時(shí)候改變我們的觀點(diǎn)了。在我們的考慮中，網(wǎng)絡(luò)安全應(yīng)該排行更高，因?yàn)閃i-Fi工作站就是設(shè)備入網(wǎng)的關(guān)口。如果你的路由器受到了惡意軟件感染，那么你所有聯(lián)網(wǎng)的設(shè)備都容易受到攻擊，包括你的手機(jī)、電腦、智能手表、電視和亞馬遜Echo。

Our remedy? For starters, make sure your Wi-Fi station is always running the latest version of its firmware, or software system, just as you are supposed to keep operating systems up-to-date for your smartphone and computer. In a 2014 survey of IT professionals and employees who work remotely conducted by the security firm Tripwire, only 32 percent said they knew how to update their routers with the latest firmware.

我們的應(yīng)對(duì)措施?首先，確保你的Wi-Fi工作站所運(yùn)行的固件或軟件系統(tǒng)是最新版本，就好比你的手機(jī)和電腦也應(yīng)該運(yùn)行最新的操作系統(tǒng)一樣。2014年，由安全公司Tripwire在IT專(zhuān)業(yè)人士以及遠(yuǎn)程工作者中展開(kāi)的調(diào)查顯示，只有32%的人表示他們知道如何為路由器更新最新的固件。

“Most consumers don’t know to patch these things,” said Matt Watchinski, a senior director of Cisco Talos, who helped research the VPNFilter malware. “They don’t treat it like they do their air-conditioner or refrigerator, where we all know we should change the filters.”

“大部分用戶都不知道如何為這些產(chǎn)品安裝補(bǔ)丁，”思科(Cisco)Talos團(tuán)隊(duì)的高級(jí)主管馬特·沃琴斯基(Matt Watchinski)說(shuō)，他曾參與對(duì)惡意軟件VPNFilter的研究。“他們不像是對(duì)待空調(diào)或冰箱一樣，大家都知道自己應(yīng)該更換濾網(wǎng)。”

Here’s a guide to some of the best practices you can embrace to ensure that your router — and, by extension, all your internet gadgets — is safe.

為了確保你的路由器以及由此擴(kuò)展開(kāi)來(lái)的所有互聯(lián)網(wǎng)設(shè)備的安全，下面是你可以采用的一些最佳方法指南。

Even though a router lacks moving parts, it needs to be maintained with the latest security updates. Easier said than done, right? Here is a basic step-by-step for how to do that:

雖然路由器沒(méi)有活動(dòng)部件，但也需要使用最新的安全更新進(jìn)行維護(hù)。說(shuō)得容易做來(lái)難，對(duì)吧?以下便是基本的詳細(xì)操作步驟：

— Consult the instruction manual for your router to get its IP address, a string of numbers that you will punch into a web browser for access to the router’s web dashboard. Jot down the number and store it somewhere safe like your filing cabinet.

——請(qǐng)查閱路由器的使用說(shuō)明書(shū)以獲取它的IP地址，你需要在一個(gè)網(wǎng)頁(yè)瀏覽器內(nèi)輸入這串?dāng)?shù)字，由此進(jìn)入路由器的網(wǎng)頁(yè)控制臺(tái)。請(qǐng)記下這串?dāng)?shù)字，并將其保存在安全的地方，比如你的文件柜中。

— After entering the router’s IP address into a web browser, log in to the base station with your username and password. In the router’s web dashboard, click on the firmware settings. Look for a button that lets you check for the latest firmware version.

——將路由器的IP地址輸入網(wǎng)頁(yè)瀏覽器后，使用你的用戶名和密碼登陸基站。在路由器的網(wǎng)頁(yè)控制臺(tái)中，點(diǎn)擊固件設(shè)置。找到一個(gè)可以查看到最新固件版本的按鈕。

— If an update is available, choose to install it and let the router restart. Repeat this process every three to six months.

——如果有更新可用，選擇安裝并讓路由器重啟。每三到六個(gè)月重復(fù)一次這個(gè)過(guò)程。

When you log in to your router, if your username and password are something like “admin” and “password,” you have a problem. Many Wi-Fi stations come with weak, generic passwords by default that manufacturers intend for you to change.

登錄路由器時(shí)，如果你的用戶名和密碼是類(lèi)似于“admin”和“password”的東西，就有問(wèn)題。很多Wi-Fi站點(diǎn)默認(rèn)的普通密碼安全性弱，廠商想讓你自行修改。

The problem with having a weak username and password is that anybody within range of your router could log in to it and change its settings, potentially opening it up to the outside world, said Dave Fraser, chief executive of Devicescape,a company that helps make public Wi-Fi networks more reliable for mobile phone service.

Devicescape公司首席執(zhí)行官戴夫·弗雷澤(Dave Fraser)說(shuō)，用戶名和密碼安全性弱存在的問(wèn)題是，處在路由器信號(hào)范圍內(nèi)的任何人都可以登錄并更改設(shè)置，這可能會(huì)導(dǎo)致路由器向外部世界開(kāi)放。他的公司的業(yè)務(wù)包括改進(jìn)公共Wi-Fi網(wǎng)絡(luò)，讓它們?cè)谝苿?dòng)電話服務(wù)方面更可靠。

So while you are checking for firmware updates in your router’s web dashboard, make sure to also check your security settings and change the username and password to something strong and unique. Security experts recommend creating long, complex passwords consisting of nonsensical phrases and added numbers and special characters. (Examples: My fav0rite numb3r is Gr33n4782# or The cat ate the C0TT0n candy 224%.) Write down these credentials on the same piece of paper where you recorded your IP address.

因此，在路由器的網(wǎng)站頁(yè)面上檢查固件更新時(shí)，一定要檢查你的安全設(shè)置，并修改用戶名和密碼，改成安全性強(qiáng)且獨(dú)特的用戶名和密碼。安全專(zhuān)家建議創(chuàng)建復(fù)雜的長(zhǎng)密碼，由沒(méi)有意義的短語(yǔ)、中間插入的數(shù)字和特殊符號(hào)組成(比如“My fav0rite numb3r is Gr33n4782#”或“The cat ate the C0TT0n candy 224%”)。把它們和你的IP地址記在同一張紙上。

Even if your router still appears to work properly, the device has reached the end of its life when manufacturers stop supporting it with firmware updates, leaving it vulnerable to future cyberthreats. You can expect this to happen every three to five years. At that point, it is crucial to upgrade to a new piece of hardware.

當(dāng)廠商停止提供固件更新時(shí)，即使路由器看上去仍在正常工作，它也已經(jīng)到了生命的盡頭，因?yàn)楣碳桓聲?huì)導(dǎo)致它將來(lái)易受網(wǎng)絡(luò)威脅的攻擊。這種情況每三到五年就會(huì)發(fā)生一次。此時(shí)，升級(jí)成新的硬件至關(guān)重要。

The best way to check is to look up your router on the manufacturer’s website and read notes about its firmware releases. If there hasn’t been a firmware update in the last year, the router has probably been discontinued.

最好的檢查辦法是在廠商的網(wǎng)站上查找你使用的路由器，并閱讀有關(guān)其固件發(fā)布的通知。如果過(guò)去一年都沒(méi)有固件更新，這款路由器可能已經(jīng)停產(chǎn)了。

If it is time to update your router, check for Wi-Fi systems that offer automatic updates to spare you the headache of having to check and download updates periodically. Many modern Wi-Fi systems include automatic updates as a feature. My favorite ones are Eero and Google Wifi, which can easily be set up through smartphone apps.

該升級(jí)路由器的時(shí)候，看看那些提供自動(dòng)更新的Wi-Fi系統(tǒng)，這樣你就不必為必須定期檢查和下載更新而頭疼了。許多現(xiàn)代Wi-Fi系統(tǒng)都有自動(dòng)更新功能。我最喜歡的是Eero和Google Wifi，它們可以通過(guò)智能手機(jī)應(yīng)用程序輕松設(shè)置。

The caveat is that smarter Wi-Fi systems tend to cost more than cheap routers that people are accustomed to. Eero’s base stations start at $199, and a Google Wifi station costs $119, compared with $50 for a cheap router. For both of these systems, you can also add base stations throughout the home to extend their wireless connections, creating a so-called mesh network.

需要注意的是，智能Wi-Fi系統(tǒng)大多比人們熟悉的廉價(jià)路由器更貴。Eero基站的起價(jià)為199美元，Google Wifi基站的起價(jià)為119美元，而便宜的路由器只要50美元。對(duì)于這兩個(gè)系統(tǒng)，你還可以在整個(gè)家中添加基站，以擴(kuò)展無(wú)線連接，創(chuàng)建一個(gè)所謂的網(wǎng)狀網(wǎng)絡(luò)。

Another bonus? Fraser noted that more modern Wi-Fi systems should have longer life spans because the companies sometimes relied on different revenue streams, like selling subscriptions to network security services.

另一個(gè)好處是什么?弗雷澤指出，更現(xiàn)代的Wi-Fi系統(tǒng)壽命應(yīng)該更長(zhǎng)，因?yàn)檫@些公司有時(shí)依賴不同的收入來(lái)源，比如網(wǎng)絡(luò)安全服務(wù)訂購(gòu)。