WPA/WPA2协议安全性分析  

Analysis on WPA/WPA2 Protocol Security

作　　者：孙全富[1] 山拜.达拉拜 李庆华[1] 

机构地区：[1]新疆大学信息科学与工程学院,新疆乌鲁木齐830046

出　　处：《信息安全与通信保密》2013年第4期81-83,共3页Information Security and Communications Privacy

基　　金：国家自然科学基金资助项目(批准号:60971130)

摘　　要：WPA/WPA2协议作为WEP协议的后继者,认识到WEP协议的设计缺陷、漏洞等方面的不足,成为无线局域网安全的守护者。文中分析了WEP协议加密原理和缺陷、WPA协议的加密原理。深入分析了802.11i4步握手协议,并针对4步握手协议的漏洞成功完成了一次完整的字典攻击,证明采用字典攻击的方法攻击WPA-PSK认证协议漏洞是可行的,并指出3种有效提高攻击速度的方法。通过分析字典攻击的基本原理提出一种防范字典攻击的有效方法。WPA/WPA2 protocols, as the successor of WEP protocol, learns the design deficiencies and loopholes of WEP protocol and becomes design the guardian of WLAN security. This paper discusses the encryption principle and loophole of WEP protocol, including the encryption principle of WPA protocol, and gives an in-depth analysis of 802.11i four-step handshake protocol. For the four-step handshake protocol vulnerability, a full dictionary attack is successfully completed, and this indicates the feasibility of dictionary attack against WPA-PSK authentication protocol. Meanwhile, the three effective methods for improving attack speed are suggested, and through analysis on the principles of dictionary attack, an effective method for preventing dictionary attack is proposed.

关 键 词：无线局域网 WPA WPA2协议 字典攻击 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]