 |
Cornell Hotel Network Study Highlights Weaknesses in Internet Security |
|
When business travelers log on to their hotel's internet network to send data back to their home office, they risk the possibility of data theft. |
A direct analysis of the networks available to guests in 46 hotels, supplemented by a survey of 147 U.S. hotels, found that a substantial majority of the hotels are not using all the possible tools to maintain their network's security. The newly released hotel study, 'Hotel Network Security: A Study of Computer Networks in U.S. Hotels" by Josh Ogle, Erica L. Wagner, and Mark P. Talbert, is available at no charge from the center at http://www.hotelschool.cornell.edu/research/chr/pubs/reports/2008.html.
A graduate of the Cornell School of Hotel Administration, Ogle is president of TriVesta LLC. Wagner is an assistant professor, Cornell School of Hotel Administration, where Talbert is a senior lecturer.
Ogle, Wagner, and Talbert explain the architecture of hotel networks, with an eye toward improving security of guests' internet access. Their survey found that about 20 percent of the 147 hotels surveyed still use simple hub-type systems, which are most vulnerable to hacking. In the first-hand analysis, the study tested the networks of 46 hotels, often without actually being guests of the hotel. 'I visited all 46 of those hotels,' said Ogle. 'Even with hotels that required authentication, I found helpful employees who got me past that barrier. So, authentication is not as effective as we think, and then I found that of the 39 hotels that offered Wi-Fi connections, only six used encryption to help protect the system.' Ogle will explain more of the technical aspects of this part of the hotel internet network study on the popular Security Now! podcast, with hosts Steve Gibson and Leo Laporte in the near future.
Hotel Guests' Data at Risk, as Study Reveals
'On balance, we were forced to conclude that guests' data transmissions are often at risk when they use a hotel's network,' said Wagner. 'However, we did find hotels that were paying attention to the security of their guests' data. I should point out that improving security does not have to be costly.'
The report concludes with a case study of the W Dallas-Victory hotel, which has taken a security step not used by most hotels. 'What the W Dallas has done is to set up each node on its network as a virtual local area network, or VLAN,' explained Talbert. 'By using these VLANs, the hotel has separated each guest's computer in a way that should protect against stolen data. It also gives the hotel greater control over the guest side of the network.'
Thanks to the support of the Center for Hospitality Research partners listed below, all Cornell Hospitality Reports and Tools are made available free of charge from the center's website, www.chr.cornell.edu.
|
|
|
 |
|
 |
|
|
Contact Information:
Fax: 607 255-8749
Phone: 607 255-4919
The Office of Executive Education, School of Hotel Administration, Cornell University; 149 Statler Hall, Ithaca, New York 14853-6902, U.S.A.
Click for Website
Click for Email
|
|
With 60 full-time teaching faculty, the Cornell Hotel School has the world's largest group of scholars focused on hospitality service-oriented management. Many large global hospitality companies are actively involved with our faculty for executive education and training, as well as research and consulting. As a result, the Hotel School is the hospitality industry's "think tank." |
|
Post News