The cyber threat is no longer limited to your office network and work persona. Adversaries realize that targets are typically more vulnerable when operating from their home network since there is less rigor associated with the
protection, monitoring, and maintenance of most home networks. Home users need to maintain a basic level of network defense and hygiene for both themselves and their family members when accessing the Internet.

Host-Based Recommendations

Windows Host OS

1. Migrate to a Modern OS and Hardware Platform
Both Windows 7 and Vista provide substantial security enhancements over earlier Windows workstation operating systems such as XP. Many of these security features are enabled by default and help prevent many common attack
vectors. In addition, implementing the 64-bit mode of the OS on a 64-bit hardware platform substantially increases the effort of an adversary to attain a system or root compromise. For any Windows-based OS, verify that Windows Update is configured to provide updates automatically.

2. Install a Comprehensive Host-Based Security Suite
A comprehensive host-based security suite provides support for anti-virus, anti-phishing, safe browsing, Host-based Intrusion Prevention System (HIPS), and firewall capabilities. These services work collaboratively to provide a layered defense against most common threats. Several security suites today provide access to a cloud-based reputation service for leveraging corporate knowledge and history of malware and domains. Remember to enable any
automated update service within the suite to keep signatures up-to-date.

3. Limit Use of the Administrator Account
The first account that is typically created when configuring a Windows host for the first time is the local administrator account. A nonprivileged “user” account should be created and used for the bulk of activities conducted on the host to include web browsing, email access, and document creation/editing. The privileged administrator account should only be used to install updates or software, and reconfigure the host as needed. Browsing the web or reading email as an administrator provides an effective means for an adversary to gain persistence on your host. Within Vista or Windows 7, administrative credentials can be easily accessed by right clicking on any application, selecting the “Run as Administrator” option, then providing the appropriate administrator password. Furthermore, all passwords associated with accounts on the host should be at least 10 characters long and be complex (include upper case, lower case, numbers, special characters).

4. Use a Web Browser with Sandboxing Capabilities
Several currently available third party web browsers now provide a sandboxing capability that can contain malware during execution thereby insulating the host operating system from exploitation. Most of these web browsers also provide a feature to auto-update or at least notify you when updates are available for download. Also, promising approaches that move the web browser into a virtual machine (VM) are starting to appear on the market but are not yet ready for mass consumer use.
5. Update to a PDF Reader with Sandboxing Capabilities
A sandbox provides protection from malicious code that may be contained in a PDF file. PDF files have become a popular technique for delivering malicious executables. Several commercial and open source PDF readers now provide sandboxing capabilities as well as block execution of embedded URLs (website links) by default.
6. Migrate to Microsoft Office 2007 or Later
If using Microsoft Office products for email, word processing, spreadsheets, presentations, or database applications, upgrade to Office 2007 or later and its XML format for storing documents. By default, the XML file formats do not execute embedded code when opened within Office 2007 or later products thereby protecting the user from malicious code delivered via Office documents. The Office 2010 suite also provides “Protected View” mode which opens documents in read-only mode thereby potentially minimizing the impact of a malicious file.
7. Keep Application Software Up-to-Date
Most home users do not have the time or patience to verify that all applications installed on their workstation are fully patched and upto- date. Since many applications do not have an automated update feature, attackers frequently
target these applications as a means to exploit a targeted host. Several products exist in the market which will quickly survey the software installed on your workstation and indicate which applications have reached end-of-life,
require a patch, or need updating. For some products, a link is conveniently provided in the report to download the latest update or patch.
8. Implement Full Disk Encryption (FDE) on Laptops
Windows 7 Ultimate as well as Vista Enterprise and Ultimate provide support for Bitlocker Full Disk Encryption (FDE) natively within the OS. For other versions of Windows, third party FDE products are available that will help prevent data disclosure in the event that a laptop is lost or stolen.
Apple Host OS
1. Maintain an Up-to-Date OS
Configure any Mac OS X system to automatically check for updates. When notified of an available update, provide privileged credentials in order to install the update. The Apple iPad should be kept up-to-date as well and requires a physical connection (e.g., USB) to a host running iTunes in order to receive its updates. A good practice is to connect the iPad to an iTunes host at least once a month or just prior to any travel where the iPad will be used.
2. Keep Third Party Application Software Up-to-Date
Periodically check key applications for updates. Several of these third party applications may have options to automatically check for updates. Legacy applications may require some research to determine their status.
3. Limit Use of the Privileged (Administrator Account)
The first account that is typically created when configuring a Mac host for the first time is the local administrator account. A non-privileged “user” account should be created and used for the bulk of activities conducted on the host
to include web browsing, email access, and document creation/editing. The privileged administrator account should only be used to install updates or software, and reconfigure the host as needed. Browsing the web or reading email as an administrator provides an effective means for an adversary to gain persistence on your host.
4. Enable Data Protection on the iPad
The data protection feature on the iPad enhances hardware encryption by protecting the hardware encryption keys with a pass code. The pass code can be enabled by selecting “Settings,” then “General”, and finally “Pass
code.” After the pass code is set, the “Data protection is enabled” icon should be visible at the bottom of the screen. For iPads that have been upgraded from iOS 3, follow the instructions at: http://support.apple.com/kb/HT4175.
5. Implement FileVault on Mac OS Laptops
In the event that a Mac laptop is lost or stolen, FileVault (available in Mac OS X, v10.3 and later) can be used to encrypt the contents of a user’s home directory to prevent data loss.
Network Recommendations
1. Home Network Design
The Internet Service Provider (ISP) may provide a cable modem with routing and wireless capabilities as part of the consumer contract. To maximize the home user’s administration control over the routing and wireless device, deploy a separate personally-owned routing device (a) that connects to the ISP provided router/cable modem. Figure 1 depicts a typical home network configuration that provides the home user with the network infrastructure to
support multiple systems as well as wireless networking and IP telephony services (b).

figure 1

2. Implement WPA2 on Wireless Network
The wireless network should be protected using Wi-Fi Protected Access 2 (WPA2) instead of
WEP (Wired Equivalent Privacy). Using current technology, WEP encryption can be broken in minutes (if not seconds) by an attacker, which afterwards allows the attacker to view all traffic passed on the wireless network. It is important to note that older client systems and access points may not support WPA2 and will require a software or hardware upgrade. When researching for suitable replacement devices, ensure that the device is WPA2-Personal certified.
3. Limit Administration to Internal Network
Administration of home networking devicesshould be from the internal-facing network. When given the option, external remote administration should be disabled for network devices. Disabling remote administration
prevents an attacker from changing and possibly compromising the home network.
4. Implement an Alternate DNS Provider
The Domain Name Servers (DNS) provided by the ISP typically don’t provide enhanced security services such as the blocking and blacklisting of dangerous and infected web sites. Consider using either open source or commercial DNS providers to enhance web browsing security.
5. Implement Strong Passwords on all Network Devices
In addition to a strong and complex password on the wireless access point, a strong password
needs to be implemented on any network device that can be managed via a web interface. For instance, many network printers on the market today can be managed via a web interface to configure services, determine job status, and enable features such as email alerts and logging.
Operational Security (OPSEC)/Internet Behavior Recommendations
1. Traveling with Personal Mobile Devices
Many establishments (e.g., coffee shops, hotels, airports, etc.) offer wireless hotspots or kiosks for customers to access the Internet. Since the underlying infrastructure is unknown and security is often lax, these hotspots and
kiosks are susceptible to adversarial activity. The following options are recommended for those with a need to access the Internet while traveling:

a. Mobile devices (e.g., laptops, smart phones) should
utilize the cellular network (e.g., mobile Wi-Fi, 3G or 4G
services) to connect to the Internet instead of wireless
hotspots. This option often requires a service plan with a
cellular provider.
b. Regardless of the underlying network, users can setup
tunnels to a trusted VPN service provider. This option can
protect all traffic between the mobile device and the VPN
gateway from most malicious activities such as monitoring.
c. If using a hotspot is the only option for accessing
the Internet, then limit activities to web browsing. Avoid
accessing services that require user credentials or entering
personal information.
Whenever possible, maintain physical control over mobile devices while traveling. All portable devices are subject to physical attack given access and sufficient time. If a laptop must be left behind in a hotel room, the laptop should be powered down and have Full Disk Encryption enabled as discussed above.

2. Exchanging Home and Work Content Government maintained hosts are generally configured more securely and also have an enterprise infrastructure in place (email filtering, web content filtering, IDS, etc. ) for preventing
and detecting malicious content. Since many users do not exercise the same level of security on their home systems (e.g., limiting the use of administrative credentials), home systems are generally easier to compromise. The forwarding of content (e.g., emails or documents) from home systems to work systems either via email or removable media may put work systems at an increased risk of compromise. For those interactions that are solicited and expected, have the contact send any work-related correspondence to your work email account.
3. Storage of Personal Information on the Internet
Personal information which has traditionally been stored on a local computing device is steadily moving to the Internet cloud. Examples of information typically stored in the cloud include webmail, financial information, and personal information posted to social networking sites. Information in the cloud is difficult to remove and governed by the privacy policies and security of the hosting site. Individuals who post information to these webbased services should ask themselves “Who will have access to the information I am posting?” and “What controls do I have over how this information is stored and displayed?” before proceeding. Internet users should also be aware of personal information already published online by periodically searching for their personal information using popular Internet
search engines.
4. Use of Social Networking Sites
Social networking sites are an incredibly convenient and efficient means for sharing personal information with family and friends. This convenience also brings some level of risk; therefore, social network users should be cognizant of what personal data is shared and who has access to this data. Users should think twice about posting information such as address, phone number, place of employment, and other personal information that can be used to target or harass you. If available, consider limiting access to posted personal data to “friends only” and attempt to verify any new sharing requests either by phone or in person. When receiving content (such as third-party applications) from friends or new acquaintances, be wary that many recent attacks have leveraged the ease with which content is generally accepted within the social network community. This content appears to provide a new capability, when in fact there is some malicious component that is rarely apparent to the typical user. Also, several social networking
sites now provide a feature to opt-out of exposing your personal information to Internet search engines. A good recommendation is to periodically review the security policies and settings available from your social network
provider to determine if new features are available to protect your personal information.
5. Enable the Use of SSL Encryption
Application encryption (also called SSL or TLS) over the Internet protects the confidentiality of sensitive information while in transit. SSL also prevents people who can see your traffic (for example at a public WiFi hotspot) from being able to impersonate you when logging into web based applications (webmail, social networking sites, etc.). Whenever possible, web-based applications such as browsers should be set to force the use of SSL. Financial institutions rely heavily on the use of SSL to protect financial transactions while in transit. Many popular applications such as Facebook and Gmail have options to force all communication to use SSL by default. Most web browsers provide some indication that SSL is enabled, typically a lock symbol either next to the URL for the web page or within the status bar
along the bottom of the browser.
6. Email Best Practices
Personal email accounts, either web-based or local to your host, are common attack targets. The following recommendations will help reduce your exposure to email-based threats:
a. In order to limit exposure both at work and home,
consider using different usernames for home and work
email addresses. Unique usernames make it more difficult
for someone targeting your work account to also target you
via your personal accounts.
b. Setting out-of-office messages on personal email
accounts is not recommended, as this can confirm to
spammers that your email address is legitimate and also
provide awareness to unknown parties as to your activities.
c. Always use secure email protocols if possible when
accessing email, particularly if using a wireless network.
Secure email protocols include Secure IMAP and Secure
POP3. These protocols, or “always use SSL” for web-based
email, can be configured in the options for most email
clients. Secure email prevents others from reading email
while in transit between your computer and the mail server.
d. Unsolicited emails containing attachments or links
should be considered suspicious. If the identity of the
sender can’t be verified, consider deleting the email without
opening. For those emails with embedded links, open your
browser and navigate to the web site either by its wellknown
web address or search for the site using a common
search engine. Be wary of an email requesting personal
information such as a password or social security number.
Any web service that you currently conduct business with
should already have this information.

7. Password Management
Ensure that passwords and challenge responses are properly protected since they provide access to large amounts of personal and financial information. Passwords should be strong, unique for each account, and difficult to guess. A strong password should be at least 10 characters long and contain multiple character types (lowercase, uppercase, numbers, and special characters). A unique password should be used for each account to prevent an attacker from gaining access to multiple accounts if any one password is compromised. Disable the feature that allows programs to remember passwords and automatically enter them when required. Additionally, many online sites make use of password recovery or challenge questions. The answers to these questions should be something that no one else would know or find from Internet searches or public records. To prevent an attacker from leveraging personal information about yourself to answer challenge questions, consider providing a false answer to a fact-based question, assuming the response is unique and memorable.
8. Photo/GPS Integration
Many phones and some new point-and-shoot cameras embed the GPS coordinates for a particular location within a photo when taken. Care should be taken to limit exposure of these photos on the Internet, ensure these photos can only be seen by a trusted audience, or use a third-party tool to remove the coordinates before uploading to the Internet. These coordinates can be used to profile the habits and places frequented for a particular individual, as well as provide near-real time notifications of an individual’s location when uploaded directly from a smart phone. Some
services such as Facebook automatically strip out the GPS coordinates in order to protect the privacy of their users.

Enhanced ProtectionRecommendations
The following recommendations require a higher level of administrative skills to implement and maintain on home networks than the previous recommendations. These recommendations provide additional layers of security but may impact your web browsing experience or require some iteration to adjust settings to the appropriate thresholds.
1. Enhanced Wireless Router Configuration Settings
Additional protections can be applied to the wireless network to limit access. The following security mechanisms do not protect against the experienced attacker, but are very effective against a less experienced attacker.
a. MAC address or hardware address filtering enables the
wireless access point to only allow authorized systems to
associate with the wireless network. The hardware address
for all authorized hosts must be configured on the wireless
access point.
b. Limiting the transmit power of the wireless access
point will reduce the area of operation (signal strength)
of the wireless network. This capability curtails the home
wireless network from extending beyond the borders of a
home (e.g., parking lot or adjacent building).
c. SSID cloaking is a means to hide the SSID, the
name of a wireless network, from the wireless medium.
This technique is often used to prevent the detection of
wireless networks by war drivers. It is important to note
that enabling this capability prevents client systems from
finding the wireless network. Instead, the wireless settings
must be manually configured on all client systems.
d. Reducing the dynamic IP address pool or configuring
static IP addresses is another mechanism to limit access
to the wireless network. This provides an additional layer
of protection to MAC address filtering and prevents rogue
systems from connecting to the wireless network.
2. Disable Scripting Within the Web Browser
If using third party web browsers such as Firefox or Chrome, use NoScript (Firefox) or NotScript
(Chrome) to prevent the execution of scripts from untrusted domains. Disabling scripting can cause usability issues, but is an effective technique to reduce web bourne attacks.
3. Enable Data Execution Prevention (DEP) for all Programs
By default, DEP is only enabled for essential Windows programs and services. Some third party or legacy applications may not be compatible with DEP, and could possibly crash when run with DEP enabled. Any program that requires DEP to execute can be manually added to the DEP exemption list, but this requires some technical expertise.

See the full article from zdnet here>>

Computer networks bring many good things into the home: more convenient Internet access, sharing of files and printers, additional home entertainment options, and so on. Yet home network technology also poses challenges. Many folks don’t know where to start. Things often don’t work right the first time. Sometimes, people settle for an inferior setup and never realize the full potential of their home network. The advice below helps you steer clear of these common problems.

1. Can’t Decide Which Network Gear You Need

Networks can be built with different combinations of hardware and software. The sheer number of choices overwhelms most beginners, who too often jump at the first “solution” they find. However, setups that perfectly meet the needs of some families just won’t cut it for others. Follow the link above to learn more about your options.

2. Network Won’t Reach Certain Areas
In many homes, networks won’t conveniently reach all of the areas a person needs. This fact surprises many folks. Stringing network cables to some rooms can prove impractical, of course. But even with wireless networks, “cold spots” where Wi-Fi radio signals won’t reach corner bedrooms, a study, or a porch are also common. Be ready to make a few concessions in your network installation plan.

3. Computers Can’t See Each Other on the Network

You’ve finished connecting all your network gear to the best of your ability, but nothing works. None of the devices can “see” each other or “talk” to the printer. No error messages are being displayed. You’re developing a sneaking suspicion that your network is laughing at you. Relax. Take a step-by-step approach to this problem, and your network will be up and running soon.

4. Computers Can’t Get on the Internet

Even when all of the devices in a home can communicate with each other, they may still fail to reach Web sites on the Internet. This, too, is a common problem when first installing a home network. After a simple check of the key network components, you’ll be surfing again in no time.

5. Special Devices Won’t Join the Network

Many home networks have a “problem child,” one computer or device that simply will not cooperate with the others. The device could be a specialized piece of hardware like a game console. It could be a lone wireless computer trying to join a wired network. Or it could be a computer running an old version of Microsoft Windows or running Linux. Whatever the situation, extra care and feeding may be required to get your problem child to behave.

6. Certain Network Applications Won’t Function

While other aspects of a home network may work reliably, this does not guarantee success with the next new feature that comes along. Instant messaging, P2P file sharing, and online games are typical problematic applications on home networks. These apps may fail to connect to a “server” or “peer,” or they may sit there like zombies and not do anything. Given time and effort, any such problems can be solved. However, solutions often require specific knowledge of how these applications work.

7. Network is Too Slow

For several reasons, a home network might not run fast enough to keep up with a family’s needs. They may experience very slow Web page downloads, sluggish or unplayable network games, interminable delays in online chatting/IM applications, and other symptoms of a bad network performance problem. Know what to watch for to avoid this frustrating situation.
8. Network Connections Drop Unexpectedly
A home network may operate flawlessly for a day, a week or a month, but suddenly, at the most inopportune time, something breaks. You may have been happily listening to an Internet radio station, swapping files on a P2P network, or playing a networked game at home. Then… boom! What happened? There are several possibilities. Don’t be surprised if this happens to you.

9. Office Computer Won’t Join Home Network

Those who use laptop computers or PDAs at their workplace naturally might want to use those same devices at home. Technical limitations make this form of network mobility more difficult than it should be. Some folks see it as a big hassle, give up, and miss out on a major gain in their personal productivity. By carefully establishing home and work network settings (often called “profiles”) on the devices, home/office network mobility can be a reality for you.

10. Network is (Too) Insecure

No, a home network won’t become overly self-conscious and suffer from a lack of confidence. Many home networks are insecure, though, in the sense of data privacy. Too many homeowners fail to take a few essential steps to protect their network from attacks by outsiders. Network attacks and “hacks” are real threats; they happen every day and affect real families. Don’t let them happen to yours!

source: http://compnetworking.about.com/od/homenetworking/tp/commonproblems.htm

A network router is a small electronic device that allows you build a home network simply. The home router serves as the core or “centerpiece” of the network to which computers, printers and other devices can be connected. Networking with a router helps you to (for example):

* share files between computers
* share an Internet connection between computers
* share a printer
* connect your game console or other home entertainment equipment to the Internet

Routers are not necessarily required to build a network. For example, you can connect two computers directly to each other with just a cable (or without wires in some cases). Home routers offer convenience and easier maintenance as your network grows.

Choosing a Network Router
You can choose from among several different types of home network router products. The two most common types in popular usage are the 802.11b and 802.11g WiFi models. 802.11g is the newer technology, but 802.11b routers often can do the job for an even lower cost.

Installing a Network Router
Network routers receive their power from an ordinary home electrical socket. When powered on, lights (LEDs) signify the unit is operating.

Network routers must be carefully configured when they are first installed. Like computers and other devices on the home network, routers must be set up with IP addresses. Routers also offer optional (but strongly recommended) security features.

Routers contain built-in software to enable setup. You access this software through your Web browser on any computer connected to the router.

Connecting Computers to a Router
The most basic use of a network router involves file sharing (copying files) between multiple computers. You do not technically need a router to set up file sharing (or a home network), but using a router greatly simplifies the task, especially when three or more computers are involved.

Home routers provide connection points (called “ports” or “jacks”) for you to connect computers with Ethernet cables. Plug one end of the cable into the router and the other into the computer’s Ethernet network adapter. Wireless routers alternatively allow computers to connect via WiFi technology, if the computer possesses a WiFi network adapter.

Connecting an Internet Modem to the Router

The ability of a network router to share your Internet connection throughout the residence is a key selling point of these boxes. Internet connection sharing can be set up without a router using alternative methods, but once again, having a router greatly simplifies the task.

To use your router for Internet sharing, connect your Internet modem to the appropropriate router jack designed for this purpose. Many network routers allow broadband modems to be connected with either a USB cable or an Ethernet cable. A few network routers even allow traditional dialup modems to be connected via serial cables to a built-in serial port.
Connecting a Printer to the Router
Sharing one printer between multiple home computers is often desired but surprisingly difficult to achieve. Without a router, people connect their printer to one computer designated as the printer host. This host computer must be specially configured, and it must also be operating whenever anyone needs to use the printer. Moving this responsibility from a host computer to a router makes both network setup and using the printer easier.

Normally you can connect your printer to the router using a USB cable or a USB-to-Ethernet cable. Alternatively, wireless print server hardware also exists. A print server connects to your printer’s USB jack and in turn makes a WiFi connection to a wireless router. A few routers contain built-in print server capabilitity, providing a built-in parallel port for cabling a printer directly.
Connecting Home Entertainment Equipment to the Router
You can connect games consoles such as Xbox, set-top devices like TiVo, and other home entertainment equipment to network routers. Networking home entertaining equipment with a router allows these devices to reach the Internet when you have Internet sharing in place there.

Wireless game adapters (also known as wireless bridges) make WiFi connections and USB-to-Ethernet cables make cabled connections to the router for this type of equipment.
Other Uses of a Network Router
A few other types of devices can be added to a network router for special-purpose applications. Video surveillance cameras, for example, can be connected to a router to allow real-time viewing of video feeds from any computer on the home network (or even remotely over the Internet). VoIP analog terminal adapters (ATAs) will often be connected to routers for enabling Internet VoIP call services.

In WiFi networks, routers can be joined with other devices (called range extenders or signal boosters) that increase the overall reach (range) of the wireless signal. Some people do this to share their home network with a neighbor. Wireless routers can sometimes be connected to each other for a similar purpose, but care must be taken to avoid conflicts or interference between the two devices.

source: http://compnetworking.about.com/od/homenetworking/a/routernetworks.htm

As a homeowner (or renter), you likely have several options for how to connect to the Internet. The connection method you choose affects how a home network must be set up to support Internet connection sharing. Each Internet network connection alternative is described here.

DSL – Digital Subscriber Line
DSL is one of the most prevalent forms of Internet connection. DSL provides high-speed networking over ordinary phone lines using digital modems. DSL connection sharing can be easily achieved with either wired or wireless broadband routers.

In some countries, DSL service is also known as ADSL, ADSL2 or ADSL2+.

Cable – Cable Modem Internet
Like DSL, cable modem is a form of broadband Internet connection. Cable Internet uses neighborhood cable television conduits rather than telephone lines, but the same broadband routers that share DSL Internet connections also work with cable.

Cable Internet is perennially more popular than DSL in the United States, but in many other countries the reverse is true.

Dial Up Internet
Once the world standard for Internet network connections, dial up is slowly being replaced with higher-speed options. Dial up uses ordinary telephone lines but, unlike DSL, dial up connections take over the wire, preventing simultaneous voice calls.

Most home networks employ Internet Connection Sharing (ICS) solutions with dial up Internet. Dial up routers are difficult to find, expensive, and generally do not perform well given such a slow Internet pipe.

Dial up is most commonly utilized in lightly populated areas where cable and DSL Internet services are unavailable. Travelers and those with unreliable primary Internet services also use dialup as a solid secondary access method.

ISDN – Integrated Services Digital Network
In the 1990s, ISDN Internet served many customers wanting DSL-like service before DSL became widely available. ISDN works over telephone lines and like DSL, supports simultaneous voice and data traffic. Additionally, ISDN provides 2 to 3 times the performance of most dial up connections. Home networking with ISDN works similarly to networking with dial up.

Due to its relatively high cost and low performance compared to DSL, today ISDN is only a practical solution for those looking to squeeze extra performance from their phone lines where DSL is unavailable.

Satellite Internet
Enterprises like Starband, Direcway and Wildblue offer satellite Internet service. With an exterior-mounted mini-dish and a proprietary digital modem inside the home, Internet connections can be established over a satellite link similar to satellite television services.

Satellite Internet can be particularly troublesome to network. Satellite modems may not work with broadband routers, and some online services like VPN and online games may not function over satellite connections.

Subscribers to satellite Internet service generally want the highest available bandwidth in environments where cable and DSL are unavailable.

BPL – Broadband over Power Line

BPL supports Internet connections over residential power lines. The technology behind power line BPL works analogously to phone line DSL, using unused signaling space on the wire to transmit the Internet traffic. However, BPL is a controversial Internet connection method. BPL signals generate significant interference in the vicinity of power lines, affecting other licensed radio transmissions. BPL requires specialized (but not expensive) equipment to join to a home network.

Do not confuse BPL with so-called powerline home networking. Powerline networking establishes a local computer network within the home but does not reach to the Internet. BPL on the other hand, reaches to the Internet Service Provider over utility power lines.

(Likewise, so-called phoneline home networking maintains a local home network over phone lines, but does not extend to the Internet connection of a DSL, ISDN or dial up service.)

Other Forms of Internet Connectivity
In fact, several other types of Internet connections have not yet been mentioned. Below is a short summary of the last remaining options:

* Fractional T1/T3 Internet – T1 and T3 are the names telecommunications firms have given to leased line network cables. Installed in some multi-resident dwellings, fractional T1/T3 lines are typically underground fiber or copper cables that connect directly to the service provider, with individual home connections switched over Ethernet cables.

* Cellular Internet – Mobile Internet connections can be made over digital cell phones. Due to high cost, cellular Internet will only be used in homes during emergencies.

* Wireless Broadband Internet – WiMax technology supports high-speed wireless Internet via base stations like cellular networks. So-called WiFi community or “mesh” networks serve a similar function using different technologies.

source: http://compnetworking.about.com/od/homenetworking/a/homeconnection.htm

Computer networks for the home and small business can be built using either wired or wireless technology. Wired Ethernet has been the traditional choice in homes, but Wi-Fi wireless technologies are gaining ground fast. Both wired and wireless can claim advantages over the other; both represent viable options for home and other local area networks (LANs).

Below we compare wired and wireless networking in five key areas:

* ease of installation
* total cost
* reliability
* performance
* security

About Wired LANs
Wired LANs use Ethernet cables and network adapters. Although two computers can be directly wired to each other using an Ethernet crossover cable, wired LANs generally also require central devices like hubs, switches, or routers to accommodate more computers.

For dial-up connections to the Internet, the computer hosting the modem must run Internet Connection Sharing or similar software to share the connection with all other computers on the LAN. Broadband routers allow easier sharing of cable modem or DSL Internet connections, plus they often include built-in firewall support.
Installation
Ethernet cables must be run from each computer to another computer or to the central device. It can be time-consuming and difficult to run cables under the floor or through walls, especially when computers sit in different rooms. Some newer homes are pre-wired with CAT5 cable, greatly simplifying the cabling process and minimizing unsightly cable runs.

The correct cabling configuration for a wired LAN varies depending on the mix of devices, the type of Internet connection, and whether internal or external modems are used. However, none of these options pose any more difficulty than, for example, wiring a home theater system.

After hardware installation, the remaining steps in configuring either wired or wireless LANs do not differ much. Both rely on standard Internet Protocol and network operating system configuration options. Laptops and other portable devices often enjoy greater mobility in wireless home network installations (at least for as long as their batteries allow).
Cost
Ethernet cables, hubs and switches are very inexpensive. Some connection sharing software packages, like ICS, are free; some cost a nominal fee. Broadband routers cost more, but these are optional components of a wired LAN, and their higher cost is offset by the benefit of easier installation and built-in security features.
Reliability
Ethernet cables, hubs and switches are extremely reliable, mainly because manufacturers have been continually improving Ethernet technology over several decades. Loose cables likely remain the single most common and annoying source of failure in a wired network. When installing a wired LAN or moving any of the components later, be sure to carefully check the cable connections.

Broadband routers have also suffered from some reliability problems in the past. Unlike other Ethernet gear, these products are relatively new, multi-function devices. Broadband routers have matured over the past several years and their reliability has improved greatly.
Performance
Wired LANs offer superior performance. Traditional Ethernet connections offer only 10 Mbps bandwidth, but 100 Mbps Fast Ethernet technology costs little more and is readily available. Although 100 Mbps represents a theoretical maximum performance never really achieved in practice, Fast Ethernet should be sufficient for home file sharing, gaming, and high-speed Internet access for many years into the future.

Wired LANs utilizing hubs can suffer performance slowdown if computers heavily utilize the network simultaneously. Use Ethernet switches instead of hubs to avoid this problem; a switch costs little more than a hub.
Security
For any wired LAN connected to the Internet, firewalls are the primary security consideration. Wired Ethernet hubs and switches do not support firewalls. However, firewall software products like ZoneAlarm can be installed on the computers themselves. Broadband routers offer equivalent firewall capability built into the device, configurable through its own software.

About Wireless LANs
Popular WLAN technologies all follow one of the three main Wi-Fi communication standards. The benefits of wireless networking depend on the standard employed:

* 802.11b was the first standard to be widely used in WLANs.
* The 802.11a standard is faster but more expensive than 802.11b; 802.11a is more commonly found in business networks.
* The newest standard, 802.11g, attempts to combine the best of both 802.11a and 802.11b, though it too is more a more expensive home networking option.

Installation
Wi-Fi networks can be configured in two different ways:

* “Ad hoc” mode allows wireless devices to communicate in peer-to-peer mode with each other.
* “Infrastructure” mode allows wireless devices to communicate with a central node that in turn can communicate with wired nodes on that LAN.

Most LANs require infrastructure mode to access the Internet, a local printer, or other wired services, whereas ad hoc mode supports only basic file sharing between wireless devices.

Both Wi-Fi modes require wireless network adapters, sometimes called WLAN cards. Infrastructure mode WLANs additionally require a central device called the access point. The access point must be installed in a central location where wireless radio signals can reach it with minimal interference. Although Wi-Fi signals typically reach 100 feet (30 m) or more, obstructions like walls can greatly reduce their range.
Cost
Wireless gear costs somewhat more than the equivalent wired Ethernet products. At full retail prices, wireless adapters and access points may cost three or four times as much as Ethernet cable adapters and hubs/switches, respectively. 802.11b products have dropped in price considerably with the release of 802.11g, and obviously, bargain sales can be found if shoppers are persistent.
Reliability
Wireless LANs suffer a few more reliability problems than wired LANs, though perhaps not enough to be a significant concern. 802.11b and 802.11g wireless signals are subject to interference from other home applicances including microwave ovens, cordless telephones, and garage door openers. With careful installation, the likelihood of interference can be minimized.

Wireless networking products, particularly those that implement 802.11g, are comparatively new. As with any new technology, expect it will take time for these products to mature.
Performance
Wireless LANs using 802.11b support a maximum theoretical bandwidth of 11 Mbps, roughly the same as that of old, traditional Ethernet. 802.11a and 802.11g WLANs support 54 Mbps, that is approximately one-half the bandwidth of Fast Ethernet. Furthermore, Wi-Fi performance is distance sensitive, meaning that maximum performance will degrade on computers farther away from the access point or other communication endpoint. As more wireless devices utilize the WLAN more heavily, performance degrades even further.

Overall, the performance of 802.11a and 802.11g is sufficient for home Internet connection sharing and file sharing, but generally not sufficient for home LAN gaming.

The greater mobility of wireless LANs helps offset the performance disadvantage. Mobile computers do not need to be tied to an Ethernet cable and can roam freely within the WLAN range. However, many home computers are larger desktop models, and even mobile computers must sometimes be tied to an electrical cord and outlet for power. This undermines the mobility advantage of WLANs in many homes.
Security
In theory, wireless LANs are less secure than wired LANs, because wireless communication signals travel through the air and can easily be intercepted. To prove their point, some engineers have promoted the practice of wardriving, that involves traveling through a residential area with Wi-Fi equipment scanning the airwaves for unprotected WLANs. On balance, though, the weaknesses of wireless security are more theoretical than practical. WLANs protect their data through the Wired Equivalent Privacy (WEP) encryption standard, that makes wireless communications reasonably as safe as wired ones in homes.

No computer network is completely secure and homeowners should research this topic to ensure they are aware of and comfortable with the risks. Important security considerations for homeowners tend to not be related to whether the network is wired or wireless but rather ensuring:

* the home’s Internet firewall is properly configured
* the family is familiar with the danger of Internet “spoof emails” and how to recognize them
* the family is familiar with the concept of “spyware” and how to avoid it
* babysitters, housekeepers and other visitors do not have unwanted access to the network

Conclusion
You’ve studied the analysis and are ready to make your decision. Bottom line, then, which is better – wired or wireless? The table below summarizes the main criteria we’ve considered in this article. If you are very cost-conscious, need maximum performance of your home system, and don’t care much about mobility, then a wired Ethernet LAN is probably right for you.

If on the other hand, cost is less of an issue, you like being an early adopter of leading-edge technologies, and you are really concerned about the task of wiring your home or small business with Ethernet cable, then you should certainly consider a wireless LAN.

source: http://compnetworking.about.com/cs/homenetworking/a/homewiredless.htm

We just purchased a second computer and now we’d like to share the printer and Internet connection between them. How do I set up a simple home network?”

As society and technology change, it’s becoming common for homes to have more than one computer. When an existing computer is a few years old, parents will often take advantage of today’s lower prices, purchase a new computer, and pass the old one down to the kids.

Suddenly, there’s a need for a home network, so all computers in the house can share an files, printers and an Internet connection.

Fortunately, setting up a basic home network is not rocket science. To start, you’ll need a router which becomes the central point of your network. Most office and electronics stores offer home networking kits with a router, ethernet (network) adapters and CAT-5 networking cable.

If your computer was assembled in the past five years, it probably already has an ethernet adapter. Check the back of the system unit for a port that looks like a telephone jack, but slightly bigger.

If you don’t have an ethernet adapter, you can purchase one (about $20) and install it yourself. You can also use a special ethernet adapter that plugs into a USB port, if you can’t stand the thought of opening your system unit to install an ethernet adapter.

Wired or Wireless Networking?

You’ll need to connect each of your computers to the router with a cable, or go wireless. If you want to use wireless connections, you’ll need a wireless router and a wireless adapter for each computer. Most laptops have a wireless adapter built in, most desktop models do not. If you need a wireless adapter, you can purchase one that installs inside the system unit, or get a USB-style adapter.

Having a wireless network eliminates the need to string unsightly cables all around the house, but it can also create a security risk. Wireless networks are often configured by default to allow access to any computer that attempts to connect. So an Evil Hacker driving by with a laptop (or even your neighbor) might be able to tap into your Internet connection or poke around your hard disk.

Fortunately, wireless security encryption is easy to set up. See my article Wireless Security for step-by-step instructions.
Network Configuration

Whether the network signals travel through wires or through the air, network resources must still be shared so that other computers can access them. If you are running Windows XP or MacOS X, all you have to do is connect your computers and high-speed modem to the router, and Internet connection sharing should just work like magic. If not, restart the cable modem, router, and the computers (in that order) and see if that does the trick. If you can’t access the Internet from one or more computers on the network, consult the manual that came with your router.

One nice side benefit of having a router is that they have firewalls built in to the hardware. Firewalls protect you by hiding your computers from network attacks, but still allow you to surf the web and handle email. So after installing a router, you can turn OFF the Windows firewall and any other software-based firewalls you may have running.
Sharing Files and Printers

Sharing files and printers on a Windows network is also pretty painless. To share a printer, go into the Printers section of the Control Panel, right-click the icon for the printer that needs to be shared, and choose Sharing from the resulting menu. By assigning a name to the shared printer, the owner allows other
computers on the network to access the printer by browsing using their Network Neighborhood (or My Network Places) icons. Access can be restricted to only some computers or users through the use of the Security or Permissions options on the Sharing screen.

The same concept applies for shared file and folders on a network. For example, if you want to share a collection of MP3 files on a home network, just browse to the folder using the My Computer icon, right-click the folder name and choose Sharing. After assigning a name to the shared resource and setting Permissions other computers on the network can access that resource via Network Neighborhood or My Network Places.

source: http://askbobrankin.com/home_networking.html