An Adaptive Security Management Framework for Wireless Local Area Network and Its Application

您当前的位置：

首页 >

文章列表页 >

An Adaptive Security Management Framework for Wireless Local Area Network and Its Application

更新时间：2025-07-09

- An Adaptive Security Management Framework for Wireless Local Area Network and Its Application
- Vol. 44, Issue 4, Pages: 34-38+56(2010)
- 作者机构：
  
  1. 中国科学技术大学计算机科学与技术系,合肥,230027
  2. 网络与交换技术国家重点实验室,北京,100876
  3. 安徽省计算与通讯软件重点实验室,合肥,230027
- 作者简介：
- 基金信息：
- DOI：
  CLC： TP393
- Online First：10 April 2010，
  
  Published：2010
- 稿件说明：
移动端阅览
An Adaptive Security Management Framework for Wireless Local Area Network and Its Application[J]. 2010, 44(4): 34-38+56.
DOI：

An Adaptive Security Management Framework for Wireless Local Area Network and Its Application[J]. 2010, 44(4): 34-38+56. DOI：

摘要

针对无线局域网易受攻击、入侵等诸多安全问题

提出一种分布式无线局域网(WLAN)安全管理框架(ASMF)

并基于该框架实现了自适应的安全管理系统(ASMS). ASMF框架依据协议分析和测试理论

即:应用主动分析法

通过构造、执行攻击测试用例

与待测协议进行交互

模拟WLAN漏洞的攻击行为

分析WLAN的防御能力; 应用被动分析技术

通过实时的网络报文分析、网络性能监测和自适应调整监测策略进行综合的WLAN安全分析和安全管理.与已有的安全系统相比

ASMF不仅能够被动地检测攻击

而且可以主动地探测未知漏洞与威胁

同时根据网络配置自适应调整防御策略

其良好的扩展性使得用户可针对新型攻击的测试、检测和自定制管理策略进行自由扩展.

Abstract

An adaptive security manage framework(ASMF)for WLAN(wireless local area network)is presented to focus on security problems of of WLAN

based on which an adaptive security management system(ASMS)is built. The ASMF bases on the theory of protocol analyse and the theory of protocol testing. The active analysis method is applied to interact on the protocol by constructing the test case while the passive analysis method is applied to monitor the network data flow and the performance of WLAN. Hence

the ASMF can analyse the security of WLAN and manage the WLAN from integer. Compared with the existing security systems

the ASMF not only detects the attack passively

but also probes unknown threats. In addition the ASMF can adjust the defensive strategy according the configure of the WLAN. The good expansibility of ASMF allows users to extend new attacking testing

new attack detecting and customizing management strategy easily.

关键词

Keywords

references

IEEE. P802.11 IEEE standard for wireless LAN-Medium access control and physical layer specification[S]. Piscataway, NJ, USA: IEEE, 2007.

TEWS E. Attacks on the wep protocol[EB/OL]. [2009-01-12]. http:∥eprint.iacr.org/.

MISHRA A, ARBAUGH W A. An initial security analysis of the IEEE 802.1X standard CS-TR 4328[R]. Maryland, USA: University of Maryland. Department of Computer Science, 2002.

FLUHRER S, MANTIN I, SHAMIR A. Weaknesses in the key scheduling algorithm of RC4 [M]∥Lecture Notes in Computer Science. Berlin, Germany: Springer, 2001:1-24.

TEWS E, WEINMANN R P, PYSHKIN A. Breaking 104 bit WEP in less than 60 seconds [M]∥Lecture Notes in Computer Science. Berlin, Germany: Springer, 2007:188-202.

TEWS E, BECK M. Practical attacks against WEP and WPA [C]∥Proceedings of the2nd ACM Conference on Wireless Network Security. New York: USA: ACM, 2009: 79-86.

Air Magnet Inc. Air magnet enterprise 24/7 WLAN security and performance monitoring [EB/OL].[2009-01-09]. http:∥www.airmagnet.com/products/enterprise/.

Fluke Inc. Analyze air wi-fi spectrum analyzer[EB/OL].[2009-01-09]. http:∥www.flukenetworks.com/fnet/en-us/products/AnalyzeAir/Overview.htm? wbc_purpose=BasiNewsListingsupp.

Air Defense Inc. Enterprise wireless LAN security and WLAN monitoring [EB/OL].[2009-1-20]. http:∥www.airdefense.net/.

陈伟琳,周颢,赵保华. 利用构造类别代数的协议安全测试方法 [J].西安交通大学学报, 2008, 42(12): 1481-1485.

XUE Yuyang, ZHOU Hao, ZHAO Baohua. The security analysis and detection of 802.1X WLAN [J]. Journal of Xi'an Jiaotong University, 2009, 43(10): 52-55.

薛雨杨,周颢,赵保华.无线局域网802.1X协议安全性分析与检测 [J].西安交通大学学报, 2009, 43(10): 52-55.

CHEN Weilin, ZHOU Hao, ZHAO Baohua. Constructed type algebra based protocol security testing method [J].Journal of Xi'an Jiaotong University,2008, 42(12): 1481-1485.

SHARPE R, WARNICKE E. Wireshark user's guide[EB/OL].[2009-01-09]. http:∥www.wireshark.org/docs/wsug_html_chunked/index.html.

Martin Roesch,Chris Green, Sourcefire Inc. SNORT users manual 2.8.5 [EB/OL].[2009-01-09]. http:∥www.snort.org/assets/125/snort_manual-2_8_5_1.pdf.

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Intrusion Detection Method of Wireless Local Area Network MAC Layer Based on Hidden Markov Model

The Security Analysis and Detection of 802.1X Wireless Local Area Network

Integrated and Joint Design Optimization of Centrifugal Compressor Impeller and Casing Treatment at Multiple Working Points

Diffusion Characteristics and Influencing Factors in Case of Hydrogen Leakage from Fuel Cell Vehicles Running in Tunnels

Knowledge Graph Representation Learning Driven by Semantic Discrimination and Subgraph Integration

Related Author

李金铃 1

薛雨杨 1

Related Institution

Anhui Province Key Laboratory of Software in Computing and Communication

⁰