无线局域网自适应安全管理框架及其应用

刘振华 1; 周颢 1; 3; 赵保华 1; 2; 3

您当前的位置：

首页 >

文章列表页 >

无线局域网自适应安全管理框架及其应用

更新时间：2025-07-09

- 无线局域网自适应安全管理框架及其应用
- An Adaptive Security Management Framework for Wireless Local Area Network and Its Application
- 西安交通大学学报 2010年44卷第4期页码：34-38+56
- 作者机构：
  
  1. 中国科学技术大学计算机科学与技术系,合肥,230027
  2. 网络与交换技术国家重点实验室,北京,100876
  3. 安徽省计算与通讯软件重点实验室,合肥,230027
- 作者简介：
- 基金信息：
  
  : 2009-09-11. 作者简介: 刘振华(1983-),男,博士生;赵保华(联系人),男,教授,博士生导师. 基金项目: 国家自然科学基金资助项目(60872009,60602016);国家高技术研究发展计划资助项目(2007AA01Z428,2009AA01Z148);安徽省自然科学研究计划重大项目(ZD2008005-2,ZD200904,JK2009A013,JK2009A025)
- DOI：
  中图分类号： TP393
- 网络首发：2010-04-10，
  
  纸质出版：2010
- 稿件说明：
移动端阅览
刘振华 1, 周颢 1, 3, 等. 无线局域网自适应安全管理框架及其应用[J]. 西安交通大学学报, 2010,44(4):34-38+56.

An Adaptive Security Management Framework for Wireless Local Area Network and Its Application[J]. 2010, 44(4): 34-38+56.
刘振华 1, 周颢 1, 3, 等. 无线局域网自适应安全管理框架及其应用[J]. 西安交通大学学报, 2010,44(4):34-38+56. DOI：

An Adaptive Security Management Framework for Wireless Local Area Network and Its Application[J]. 2010, 44(4): 34-38+56. DOI：

摘要

针对无线局域网易受攻击、入侵等诸多安全问题

提出一种分布式无线局域网(WLAN)安全管理框架(ASMF)

并基于该框架实现了自适应的安全管理系统(ASMS). ASMF框架依据协议分析和测试理论

即:应用主动分析法

通过构造、执行攻击测试用例

与待测协议进行交互

模拟WLAN漏洞的攻击行为

分析WLAN的防御能力; 应用被动分析技术

通过实时的网络报文分析、网络性能监测和自适应调整监测策略进行综合的WLAN安全分析和安全管理.与已有的安全系统相比

ASMF不仅能够被动地检测攻击

而且可以主动地探测未知漏洞与威胁

同时根据网络配置自适应调整防御策略

其良好的扩展性使得用户可针对新型攻击的测试、检测和自定制管理策略进行自由扩展.

Abstract

An adaptive security manage framework(ASMF)for WLAN(wireless local area network)is presented to focus on security problems of of WLAN

based on which an adaptive security management system(ASMS)is built. The ASMF bases on the theory of protocol analyse and the theory of protocol testing. The active analysis method is applied to interact on the protocol by constructing the test case while the passive analysis method is applied to monitor the network data flow and the performance of WLAN. Hence

the ASMF can analyse the security of WLAN and manage the WLAN from integer. Compared with the existing security systems

the ASMF not only detects the attack passively

but also probes unknown threats. In addition the ASMF can adjust the defensive strategy according the configure of the WLAN. The good expansibility of ASMF allows users to extend new attacking testing

new attack detecting and customizing management strategy easily.

关键词

Keywords

references

IEEE. P802.11 IEEE standard for wireless LAN-Medium access control and physical layer specification[S]. Piscataway, NJ, USA: IEEE, 2007.

TEWS E. Attacks on the wep protocol[EB/OL]. [2009-01-12]. http:∥eprint.iacr.org/.

MISHRA A, ARBAUGH W A. An initial security analysis of the IEEE 802.1X standard CS-TR 4328[R]. Maryland, USA: University of Maryland. Department of Computer Science, 2002.

FLUHRER S, MANTIN I, SHAMIR A. Weaknesses in the key scheduling algorithm of RC4 [M]∥Lecture Notes in Computer Science. Berlin, Germany: Springer, 2001:1-24.

TEWS E, WEINMANN R P, PYSHKIN A. Breaking 104 bit WEP in less than 60 seconds [M]∥Lecture Notes in Computer Science. Berlin, Germany: Springer, 2007:188-202.

TEWS E, BECK M. Practical attacks against WEP and WPA [C]∥Proceedings of the2nd ACM Conference on Wireless Network Security. New York: USA: ACM, 2009: 79-86.

Air Magnet Inc. Air magnet enterprise 24/7 WLAN security and performance monitoring [EB/OL].[2009-01-09]. http:∥www.airmagnet.com/products/enterprise/.

Fluke Inc. Analyze air wi-fi spectrum analyzer[EB/OL].[2009-01-09]. http:∥www.flukenetworks.com/fnet/en-us/products/AnalyzeAir/Overview.htm? wbc_purpose=BasiNewsListingsupp.

Air Defense Inc. Enterprise wireless LAN security and WLAN monitoring [EB/OL].[2009-1-20]. http:∥www.airdefense.net/.

陈伟琳,周颢,赵保华. 利用构造类别代数的协议安全测试方法 [J].西安交通大学学报, 2008, 42(12): 1481-1485.

XUE Yuyang, ZHOU Hao, ZHAO Baohua. The security analysis and detection of 802.1X WLAN [J]. Journal of Xi'an Jiaotong University, 2009, 43(10): 52-55.

薛雨杨,周颢,赵保华.无线局域网802.1X协议安全性分析与检测 [J].西安交通大学学报, 2009, 43(10): 52-55.

CHEN Weilin, ZHOU Hao, ZHAO Baohua. Constructed type algebra based protocol security testing method [J].Journal of Xi'an Jiaotong University,2008, 42(12): 1481-1485.

SHARPE R, WARNICKE E. Wireshark user's guide[EB/OL].[2009-01-09]. http:∥www.wireshark.org/docs/wsug_html_chunked/index.html.

Martin Roesch,Chris Green, Sourcefire Inc. SNORT users manual 2.8.5 [EB/OL].[2009-01-09]. http:∥www.snort.org/assets/125/snort_manual-2_8_5_1.pdf.

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于隐马尔可夫模型的无线局域网媒体接入控制层入侵检测方法

无线局域网802.1X协议安全性分析与检测

冷库水平空气幕热湿阻隔性能数值模拟研究

采用试验设计方法的第三代CO2气体箔轴承箔片几何参数敏感性分析

电动车辆间接热系统快速除湿响应迟滞机理及优化控制策略