IEEE 802.11i协议的DOS攻击分析及改进

该文对无线局域网最新一代的安全协议802.11i协议工作工程中的认证、密钥管理二个阶段进行分析,发现其存在DOS攻击缺陷,并对两阶段中可能出现的相应威胁提出了改进办法。通过对比发现改进后的协议能在认证阶段连接只有通过了双向认证的合法用户。在四步握手时能在CPU正常工作前提下把存储器资源消耗的问题解决,从而更大程度提高了无线数据传输的有效性。

Analysis and Improvement Against DOS Attack in IEEE 802.11i Protocol

This paper analyzes authentication, key management in two phases based on 802.11i, the latest generation of wireless LAN security protocol. Point out the DOS defects in two phases, and raise the possible corresponding improvements. After comparing, we find that the improved protocol can connect legitimate users. Only through the mutual authentication in authentication stage. In the four-step handshake when the CPU works under normal condition, it can solve the problem of resource consumption of the memory, thereby enhancing the effectiveness of wireless data transmission more.