无线局域网WEP协议安全漏洞研究

The Security Weakness Study of WLAN WEP Protocol

随着无线局域网的普及和应用,网络安全问题日益突出,商用无线网络尤其需要采取有效的安全方案。有线等价协议WEP是在IEEE802.11标准中采用的信息保密机制,它主要用于无线局域网络中链路层信息数据的保密。文中对WEP的工作机理进行了分析,重点对其安全性能包括数据加密、IV重用、密钥管理、身份认证机制和数据完整性检查机制等方面进行了研究,并发现WEP不能对无线局域网中的数据提供可靠的保护。最后,提出了对WEP从加密和认证的角度进行改进的建议。

As the increasing development of 802.11 wireless networks,the security issues become more and more noticeable. So it is necessary to adopt robust security solutions for wireless network in business environment. The IEEE 802.11 standard for wireless networks includes a wired equivalent privacy (WEP) protocol, which is used to protect link-layer communications from eavesdropping and other attacks. In this paper, have discovered several serious security flaws in the protocol, stemming from misapplication of cryptographic primitives. The flaws lead to a number of practical attacks that demonstrate that WEP fails to achieve its security goals.Analyses detail of the WEP,emphasis on data cryptogram,IV re-used, cryptogram administration,identity and inspection mechanism. At last,in the direction of authentication and encryption,the improved measures about WEP are discussed.