无线局域网身份认证的研究与仿真.docVIP

无线局域网身份认证的研究与仿真 摘要：无线局域网的安全是目前广大用户和研究者非常关注的问题。IEEE802．11i标准采用了基于可扩展认证协议(EAP,Extensible Authentication Protoc01)的IEEE802．1X标准作为增强无线局域网安全的重要方法。而仿真方法是研究认证协议对网络性能影响的重要手段。本文在研究IEEE802．1X协议的基础上，通过在OPNET仿真软件中构造带有认证功能的节点模型，根据其仿真结果来测试无线网络中认证过程对网络性能的影响。文中首先简要介绍了无线网络的发展状况，随后着重介绍了被广泛用于认证的IEEE802．1X标准，对标准中给出的状态机作了详细介绍。在介绍了OPNET建模原理后，作者提出了建立OPNET仿真模型需要考虑的因素，特别是针对目前很多建模方式没有考虑正确性的问题，提出了对协议提供的自动机进行等效转换以建立仿真需要的模型的方法，保证了所建立模型的正确性。采用多种不同方式建立了认证功能的模型，通过理论分析，得到了各个模型所适合的使用场景。通过仿真场景测试，得出以下结论：认证功能对网络性能的影响集中于初期阶段，而在网络达到稳定以后，认证功能并不会对网络性能造成额外的影响。文中最后介绍了集成认证功能、加密功能和路由功能的无线MESH仿真系统，该系统是以后利用仿真方法研究其他网络安全协议的基础。 WIRLESS LAN IDENTITY AUTHENTICATION RESEARCH AND SIMULATION Abstract：The security of wireless local area network(WLAN)is one of the issues of greaconcern from both users and researchers．The IEEE802．1 l i standard adopts IEEE802．1 X，a standard based on the Extensible Authentication Protocol，as an important method to enhance the security．Simulation is an important approach to study the influence of authentication protocols on the performance of the network． Based on the study of the IEEE802．1X standard，its influence on network performance is simulated throuth the construction of authentication enabled node models in OPNET．After a brief review on the development of WLAN， IEEE 802．1X standard iS emphasized，which iS widely used for authentication，and the Finite States Machines(FSMs)given in the standard are described in detail．Next to the introduction of modeling principles in OPNET simulation，some considerable factors are highlighted，typically the correctness，which is always ignored during the modeling procedure．This thesis presents a new method to achieve the correctness，which iS to deduce the models in OPNET from the FSMs given in the standard．The EAP authentication models are established in different ways，and their suitable scenarios are obtained through theoretic analysis，respectively．From the simulation results，we draw the following conclusions：the added authentication function does influen