基于无线入侵防御系统的中间人攻击检测功能的设计与实现

发布时间：2018-02-24 02:32

本文关键词： 802.11协议无线入侵防御系统中间人攻击网络安全　出处：《华中科技大学》2014年硕士论文　论文类型：学位论文

【摘要】：随着计算机网络不断地完善和发展,给人们带来方便的同时也对网络安全技术提出了更高的要求,人们的日常生活越来越依附于网络,更多的业务都放到网上来完成,例如,银行、各个公司的内部资料等,越来越多的敏感数据充斥在网络中,面对各种各样的网络安全危机,要提高对网络安全的防护措施,把威胁降到最低。802.11无线网络,无线环境更加复杂,相比于802.3有线网络来说更容易受到网络攻击,例如恶意入侵者、非法客户端以及周边无线设施的威胁和影响。为了适应802.11无线网络安全的需要。无线入侵防御系统可以根据企业用户自定义的无线安全策略对802.11网络中存在的威胁网络安全、干扰网络服务、影响网络性能的无线行为或设备进行全面的检测及防护。并且根据中间人攻击在802.11协议环境下攻击特点,提出了对应的解决方案,检测效果良好。该系统采用跨设备消息传递和子模块独立驱动机制,各个模块完成特定功能。中间人攻击是一种比较成熟的攻击方式,出现在计算机安全和密码学的各个领域,在不同领域攻击方式稍有不同但是大体类型不会改变,它同样也出现在802.11无线网络中,在无线入侵防御系统的基础上,文章对802.11网络下中间人攻击检测提出一种有效地解决方案,方案采用子攻击分布检测,逐步数据分析,分析子攻击之间联系并推导结果的方式完成。经过系统测试和模块测试,证明该检测方法能够对所描述的中间人攻击成功的检测。该系统采用分模块开发方式,降低模块之间的耦合性,便于系统日后扩展功能点,并根据用户的需要不断升级更新,完善攻击检测功能,力求做到面面俱到。无线入侵防御系统会让802.11无线网络安全得到保障。
[Abstract]:With the continuous improvement and development of computer network, it brings convenience to people and puts forward higher requirements for network security technology. People's daily life is more and more dependent on the network, and more and more business is put on the Internet to complete, for example, In the face of various network security crises, more and more sensitive data, such as internal information from banks and companies, must be improved to protect the network security and minimize the threat to the .802.11 wireless network. The wireless environment is more complex and more vulnerable to network attacks than 802.3 wired networks, such as malicious intruders, In order to meet the need of 802.11 wireless network security, wireless intrusion prevention system can threaten the network security of 802.11 network according to the wireless security policy defined by enterprise users. Interference with network services, wireless behaviors or devices that affect network performance are detected and protected. According to the attack characteristics of man-in-the-middle attack in 802.11 protocol environment, the corresponding solution is proposed. The detection effect is good. The system adopts cross-device message transmission and independent driving mechanism of sub-modules, and each module accomplishes specific functions. The man-in-the-middle attack is a relatively mature attack method, which appears in various fields of computer security and cryptography. It also appears in 802.11 wireless network on the basis of wireless intrusion prevention system. In this paper, an effective solution to man-in-the-middle attack detection in 802.11 network is proposed. The scheme uses sub-attack distribution detection, step by step data analysis, analysis of the relationship between sub-attacks and derivation of the results. It is proved that this detection method can successfully detect the described man-in-the-middle attack. The system adopts sub-module development method, which reduces the coupling between modules, facilitates the system to extend the function points in the future, and updates continuously according to the needs of users. Improve the attack detection function and make every effort. Wireless intrusion Prevention system will ensure the security of 802.11 wireless network.
【学位授予单位】：华中科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【相似文献】