无线局域网加密技术研究.docVIP

PAGE I 摘 要 随着无线技术的发展，无线局域网已经成为IT行业的一个新的热点，已经成为计算机网络的一个重要的组成部分。无线局域网方便了人们，使得人们可以随时随地获得高质量的语音、数据和多媒体服务。但是由于无线局域网在空间上的开放性使得它曝露出的安全问题，例如：攻击、伪接入点AP、非法访问、不恰当的安全措施。本文从分析无线局域网的安全威胁出发，对802.11系列协议所使用的安全技术(有线等效加密协议WEP. Wi-Fi保护访问协议WPA)进行深入研究。802.11标准定义了两种认证服务：开放系统认证和共享密钥认证。采用共享密钥认证的工作站必须执行有线等效保密协议。WEP加密存在固有的缺陷，它的密钥固定且比较短和WEP的密钥在传递过程中轻易被截获等等因素增加了以WEP作为安全手段的WLAN的安全风险。而WPA采用了基于动态密钥的生成方法及多级密钥治理机制，方便了WLAN的治理和维护。WPA由认证、加密和数据完整性校验三个部分组成。本文指出有线等效加密协议WEP不足之处和Wi-Fi保护访问协议WPA设计优点，并对WEP，WPA和802.11i机制进行分析。文章最后提出了无线局域网安全解决措施，从基本措施入手，到部署VPN、无线入侵检测系统、802.11i等解决方案。目的在于提高人们对无线网络安全的关注和认识，从而提高应对无线网络信息安全的防范能力。 关键词：无线局域网，加密技术，安全 注：本设计（论文）题目来源于教师的国家级（或部级、省级、厅级、市级、校级、企业）科研项目，项目编号为： U0935002 。 PAGE 43 Abstract With the amount of the development of wireless technology, wireless local area network has become the IT industry to a new hotspot. Computer networks have become an important part.. Wireless LAN easy for people to make it anytime, anywhere access to high-quality voice, data and multimedia services. However, as wireless local area network in the open space makes it Pulu Chu security issues. For example: attacks,false access point AP, unauthorized access, improper safety measures.. Based on the analysis of wireless LAN security threats start of 802.11 security technology use agreement (Wired Equivalent Privacy protocol WEP. Wi-Fi Protected Access Protocol WPA) in-depth study. 802.11 standard defines two authentication services: open system authentication and shared key authentication. Workstation using shared key authentication must be performed Wired Equivalent Privacy protocol. WEP encryption inherent defects, and its key fixed and relatively short, and WEP key in the transmission was intercepted, and so forth easily added to WEP as a secure means of WLAN security risks. The WPA uses dynamic key generation method based on multi-level key management mechanism and to facilitate the management and maintenance of the WLAN. WPA by the authentication, encryption and data integrity check of three p