无线网络钓鱼AP攻击检测技术研究  

RESEARCH ON DETECTION TECHNOLOGY OF FISHING AP ATTACK IN WIRELESS NETWORK

作　　者：金双齐 凌捷[1] 

机构地区：[1]广东工业大学计算机学院,广东广州510006

出　　处：《计算机应用与软件》2016年第10期307-310,共4页Computer Applications and Software

基　　金：广东省自然科学基金项目(S2012020011071);广东省科技计划项目(2013B040401017;2014A010103029);广州市科技计划项目(2014J4100201)

摘　　要：随着无线局域网应用的普及,针对无线网络的攻击方式也逐渐增多。无线钓鱼AP攻击通过被动或主动方式诱使用户连接钓鱼AP,进而获取用户的敏感信息,是当前被滥用的攻击方式之一。针对这种情况,提出一种改进的钓鱼AP攻击检测方法,通过利用TTL值的递减变化,以及综合分析网关与路由信息,实现对AP的合法性检测。实验结果表明,该方法能够有效地检测无线钓鱼AP和无线中间人等攻击。With the popularisation of WLAN,the attacks against wireless network are increasingly growing. Wireless fishing AP attack,through passive or active way,induces users to connect fishing AP,and then catches users' sensitive information,it is currently one of the abused attack modes. In light of this,we proposed an improved fishing AP attack detection method,by using diminishing variation of TTL value as well as comprehensively analysing the gateway and routing information,it realises validity detection on AP. Experimental results showed that this method can effectively detect the attacks including wireless fishing AP and wireless man-in-the-middle.

关 键 词：钓鱼AP攻击 WLAN WIFI 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]