开放接入点的安全可信接入  

Secure and trusted access for Access Point(AP) in open system authentication

作　　者：刘永磊[1] 金志刚[2] 杜磊[2] 

机构地区：[1]天津城建大学计算机与信息工程学院,天津300384 [2]天津大学电子信息工程学院,天津300072

出　　处：《计算机工程与应用》2016年第6期99-101,106,共4页Computer Engineering and Applications

基　　金：天津市高等学校科技发展基金计划项目(No.20120813)

摘　　要：随着无线网络公众服务的推进,免费的开放接入点爆发式增长。针对开放接入点日益突出的安全问题,尤其是伪造接入点带来的个人隐私信息泄露,钓鱼攻击,漏洞攻击等,提出了一种基于接入点行为分析的安全可信接入方法。该方法参考了垃圾邮件判定的相关技术,采用D-S证据理论,建立一个推理规则库(包含SSID判别,Beacon密度,AP的物理层特性,数据转发行为特性等),通过接入点行为证据的分析和合成,完成对接入点可信性的判定,从而避免无线客户端接入非法的接入点。通过典型实例验证了该方法。With the rapid development of public service of wireless network, the quantities of free Access Points（APs）in open system authentication increase explosively. However, the security problems also rise prominently, especially, personal privacy disclosure brought by fake APs, phishing attack and funnel attack. Referring to the mature methods of spam judge, this paper proposes a secure and trusted access method for AP in open system authentication. This method adopts D-S evidence theory. An inference rule base is built, including SSID, Beacon frame transmission density, PHY features of AP, data forwarding features of AP and et al. Through the analysis and combination of AP behavioral evidences, the decision of AP credibility is given. Therefore the wireless terminals can access into the secure and trusted AP. This method is verified by the typical instance.

关 键 词：无线局域网 接入点 D-S证据理论 行为分析 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]