供电企业无线局域网安全性研究

发布时间：2018-04-10 19:38

本文选题：无线局域网 + 供电企业　；参考：《江苏大学》2017年硕士论文

【摘要】：随着信息技术的发展,基于IEEE 802.11标准的无线局域网WLAN设备在工作和生活中越来越普及。无线局域网技术灵活便捷的特点给用户带来了极大的方便,与此同时,也带来了新的安全问题,其在安全性上比有线网络更加脆弱,特别是在安全等级要求较高的场所使用会带来严重的安全风险。本论文主要针对供电企业无线局域网的安全需求,在现有多子系统、多类型用户的网络架构的基础上,提出一种符合供电企业信息安全要求的无线局域网安全模型和系统架构。论文的主要工作如下:1、从无线局域网的传统安全风险分析出发,根据供电企业特殊的产业环境,重点分析供电企业强干扰对无线信号安全传输产生的影响,主要从传输安全、认证与接入安全、网络安全、用户与管理安全四个方面进行供电企业无线局域网的安全需求分析。2、在安全需求分析的基础上,基于IEEE 802.11n无线局域网标准和IEEE 802.11i安全标准,采用CCMP协议对数据进行加密,同时利用MIMO-OFDM信号传输技术以及IEEE 802.1x和Web+Portal认证的技术设计并给出适用于供电企业的无线局域网安全规划方案。然后,分别从无线局域网的传输安全技术、接入与认证安全协议两个方面进行研究。3、对于数据的传输安全,方案使用基于AES算法的CCMP安全加密协议,利用其完成传输数据的加密和完整性校验。为验证CCMP协议的安全性,本文对CCMP协议进行仿真并对其安全性能进行分析。而供电企业无线局域网处于强电磁干扰的环境中,为应对电磁干扰而引发的网络安全可靠问题,采用MIMO-OFDM系统并通过仿真分析其在不同的噪音环境下不同空时编码的抗干扰性能。4、对于接入认证协议,针对IEEE 802.1x认证方式中EAP-TLS协议无法提供客户端和认证系统之间的双向认证从而造成中间人攻击、拒绝服务攻击和会话劫持攻击的缺陷,本文通过在EAP-TLS协议的关键数据帧上引入身份ID机制实现了对数据帧来源和真实性的验证,对客户端和认证系统之间传输的所有EAPOL帧的关键字段做加密处理,实现数据帧类型的隐藏。基于以上的方式来增强EAP-TLS协议抵御攻击的能力。通过对供电企业无线局域网传输关键技术的分析与仿真以及对用户接入协议的分析与改进表明该规划方案具有效率高、可靠性强和安全机制完善的特点。
[Abstract]:With the development of information technology, WLAN WLAN devices based on IEEE 802.11 are becoming more and more popular in work and life.The flexible and convenient technology of WLAN brings great convenience to users, at the same time, it also brings new security problems, which is more vulnerable than wired network in security.Especially in places where the safety level is high, there are serious safety risks.This paper mainly aims at the security requirement of WLAN in power supply enterprises. Based on the existing multi-subsystem and multi-type user network architecture, this paper proposes a WLAN security model and system architecture that meets the information security requirements of power supply enterprises.The main work of this paper is as follows: from the traditional security risk analysis of WLAN, according to the special industrial environment of power supply enterprises, the paper mainly analyzes the influence of strong interference of power supply enterprises on the secure transmission of wireless signals, mainly from the transmission security.Authentication and access security, network security, user and management security are analyzed in four aspects: security requirement analysis of WLAN in power supply enterprise. Based on security requirement analysis, IEEE 802.11n WLAN standard and IEEE 802.11i security standard are used.The CCMP protocol is used to encrypt the data, at the same time, the MIMO-OFDM signal transmission technology and the authentication technology of IEEE 802.1x and Web Portal are used to design and provide the security planning scheme of WLAN for power supply enterprises.Then, the transmission security technology of WLAN, access security protocol and authentication security protocol are studied respectively. For data transmission security, the scheme uses CCMP security encryption protocol based on AES algorithm.It is used to encrypt and verify the integrity of the transmitted data.In order to verify the security of CCMP protocol, the CCMP protocol is simulated and its security performance is analyzed.The power supply enterprise wireless local area network is in the environment of strong electromagnetic interference, in order to deal with the electromagnetic interference caused by the network security and reliability problems,Adopting MIMO-OFDM system and analyzing the anti-jamming performance of different space-time coding in different noise environment by simulation. 4, for access authentication protocol,In IEEE 802.1x authentication mode, EAP-TLS protocol can not provide bidirectional authentication between client and authentication system, which results in man-in-the-middle attack, denial of service attack and session hijacking attack.In this paper, the identity ID mechanism is introduced into the key data frames of the EAP-TLS protocol to verify the source and authenticity of the data frames, and the key fields of all the EAPOL frames transmitted between the client and the authentication system are encrypted.Hide the data frame type.Based on the above methods to enhance the ability of EAP-TLS protocol to resist attacks.Through the analysis and simulation of the key technology of WLAN transmission in power supply enterprises and the analysis and improvement of user access protocol, it is shown that the planning scheme has the characteristics of high efficiency, strong reliability and perfect security mechanism.
【学位授予单位】：江苏大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TN925.93

【相似文献】