基于SNMP的无线网络安全管理存在的问题及相应对策

SNMP广泛应用于管理和监控计算机设备和有线/无线网络,SNMPv3定义了与安全相关的功能USM和VMAC,提供鉴别、加密和访问控制功能。但这种安全模式还是不能有效避免中间人攻击等问题。分析了使用SNMP协议管理无线网络存在的安全隐患,采用一种积极的安全对策,通过使用双向认证方式和Diffie-Hellman算法加强了网络的安全性,提高了无线网络环境下数据传输的正确性。

Secure Problems and Correlative Countermeasures in Course of Using SNMP to Manage Wireless Network

SNMP is widely used for monitoring and managing computers and network devices on wired and wireless network. Three very important security features (authentication, encryption, access control) are added to SNMPv3 under the User-based Security Model. In the paper, we are analyzing the problem of one way authentication that leads to the MITM and the vulnerability pertaining to the password update method of SNMPv3. we propose to use certification authority for two-way authentication and Diffie-Hellman algorithm for key exchange to mitigate the impacts of these problems, improve the validity of the data transmission under the wireless network circumstance.