WLAN中基于规范的自适应DoS攻击检测  

Specification based on adaptive DoS attacks detection in WLAN

作　　者：张明雷[1] 郭渊博[1] 张来顺[1] 李雅琦 

机构地区：[1]解放军信息工程大学电子技术学院 [2]西安68090部队

出　　处：《计算机应用研究》2010年第8期3038-3041,3044,共5页Application Research of Computers

基　　金：国家"863"计划资助项目(2007AA01Z405);国家部委预研基金资助项目(4050102020302)

摘　　要：无线网络由于其传输介质及通信规程的特殊性,除了要面对有线网络中存在的各种拒绝服务(denial of service,DoS)攻击之外,还面临着一些在无线环境下特有的DoS攻击。针对由伪造协议会话中使用的管理帧和EAP帧发起的DoS攻击,提出了一种基于规范的自适应检测方法(WSBA),为无线局域网所执行的安全协议建立在正常运行时的状态转移模型连同网络安全策略约束定义作为检测规范,作为检测此类DoS攻击的依据。给出了检测阈值的自适应调整算法,分析了算法参数设置对检测性能的影响。实验测试结果表明该方法是正确而有效的。Due to the specialty of the transport medium and correspond network protocol,wireless networks not only suffer from all kinds of denial of service attacks exist in wired LAN,but also face some special DoS attacks that could only occur in wireless environment. This paper focused on those DoS attacks that launched by using fabricated management and EAP frames in WLAN. Proposed a specification based on adaptive DoS attacks detection method,built a transition model for the security protocol which wireless LAN implemented,and defined this transition model and network security policy constrains as the specification to detect DoS attacks. Also proposed an adaptive threshold adjustment algorithm and analyzed the influence of algorithm parameters to the detection performance. The result of the experiments show that the method is correct and effective.

关 键 词：无线局域网 拒绝服务攻击 有限状态自动机 安全策略约束 自适应阈值 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]