无线局域网中辅助NIDS的蜜罐的实现

Implementation of Defensive Honeynet Assisted NIDS in Wireless LAN

无线网络入侵监测系统(NIDS)还不能应对流量过载和新型攻击的问题,这制约着它的发展。蜜罐使用不同的实现方法可以达到不同的目的。文中主要研究无线局域网中如何利用蜜罐来辅助NIDS设计的问题。文中概述了无线NIDS中存在的安全问题,分析了802.11b中无线NIDS和蜜罐结合的可能性,提出了无线局域网中利用hotzone来辅助NIDS的方案。通过在校园网里部署这一系统,得到了针对客户机和AP的攻击信息,最后人工对整个系统进行测试,证明了这一设计的正确性。

The wireless NIDS(abbreviation for network intrusion detection system)cannot deal with data overloading and new attacks, and as a result, it limits the development of wireless security techniques. The purpose of honeypot depends on its deployment. This article outlines the drawbacks in wireless NIDS and analyzes the feasibility of NIDS in combination with honeypot to detect attacks. In this design, hot zone is used to assist NIDS and the total system is deployed in the campus LAN. It has gathered the attack...