基础无线局域网中的入侵检测

Intrusion detection in infrastructure wireless LANs

无线局域网接入简单方便,而且具有移动性．随着无线技术和网络技术的发展,无线网络正成为市场热点,同时,无线局域网(WLAN)受到越来越多的威胁．无线网络不但因为基于传统有线网络架构而受到攻击,还有可能受到基于IEEE 802．11标准本身的安全问题而受到威胁．无线局域网的这些特性为入侵者留下了一些开放的“后门”,入侵者可以利用“后门”轻而易举地进入网络中．分析了易被入侵者利用的第2层协议的安全弱点,讨论了消除这些脆弱性的措施,IEEE 802．11定义了2种运作模式,对等(Ad hoc)模式和基础(Infrastruc- ture)模式．讨论以基础模式运行的无线局域网中的一些入侵检测方法．

The mobility and ease of access and connectivity to wireless local area networks(WLANs) has appealed to both legitimate users and intruders. These attributes of WLANs leave open backdoors in the security mechanism that allow easy entrance to intruders and must, therefore, be addressed. Layer 2 security vulnerabilities that are a boon to intruders and discusses measures to counteract them, particularly in the widely used IEEE 802.11b WLAN implementation were analyzed. Finally, methodologies to detect an intrusion when a WLAN is operating in infrastructure mode were discussed.