具安全性與自我組織能力的無線網狀網路

Design of Efficient and Secure Multiple Wireless Mesh Network

蔡憲邦(Hsien-pang Tsai)

指導教授 ： 柯開維

國立臺北科技大學/機電學院/資訊工程系所/碩士(2005年)

https://doi.org/10.6841/NTUT.2005.00153

摘要

無線網狀網路(Wireless Mesh Network)是以無線取代有線的方式，讓無線基地台之間可以透過無線的方式傳輸來傳遞訊息，使得無線基地台之間的通訊將可以構成網狀的網路架構。藉此提高無線網路服務的覆蓋面，並且達到「最後一哩(Last mile)」的網路服務。而因無線傳輸的機會增加，使得除了既有的無線網路安全問題外，無線網狀網路的安全問題將更為嚴重。
本論文旨在建立一套適合無線網狀網路的安全架構。首先我們藉由無線網狀網路的特性，與IEEE 802.1x安全認證架構的探討，提出透過樹狀架構的方式建立一套安全的無線網狀網路架構。並且對於無線網狀網路中無線基地台的基本功能：自我組態、自我設定與自我修復等機制加以定義。接著說明我們所提出架構的特性，與可能發生於無線網狀網路的攻擊尋求解決的方式，並與其它已存在的安全機制比較。

關鍵字

無線區域網路 ； 網路安全 ； IEEE 802.11 ； IEEE 802.1x ； IEEE 802.11i

並列摘要

Wireless mesh networks (WMNs) are an alternative technology for last-mile broadband Internet Access. The wireless meshed topology provides good reliability, geographical coverage, and network scalability. In WMNs, similar to ad hoc networks, each node operates not only as a host but also as a router. Users’ packets are forwarded to and from an Internet-connected gateway in multihop fashion. Unfortunately, since packets are transmitted in a more opened environment, they encounter a serious security problem – An attacker can monitor the data traffic in the air and even intrude the network nodes easier than in ordinary WLAN. This is the motivation of behind this research.
In this thesis, we first discuss a WMN architecture, including its property and security issues that are different from a WLAN. Then, we propose a secure tree topology to build and manage a WMN. Utilizing the tight structure between a parent and a child node, we can build the security mechanism for a WMN. In addition to the security issues and solutions, we also consider the availability of a WMN and design basic functions over the secure and tree-based architecture, such as self-organization, self-healing, and self-reconfiguration. Finally, we summarize our proposed mechanisms and compare with some existed methods that are possible being applied to a WMN to manifest the feature of the research.

並列關鍵字

Tree ； WLAN ； Security ； IEEE 802.11 ； IEEE 802.1x ； IEEE 802.11i

參考文獻

[2] B.Schrick and M. Riezenman, “Wireless Broadband in a Box,” IEEE Spectrum, June 2002, pp.38-43.

[4] Jangeun Jun, and Mihail L. Sichitiu, “The Nominal Capacity of Wireless Mesh Networks,” IEEE Wireless Communications, vol. 11, issues 5, pp.8-14, October 2003.

[5] Tzu-Jane Tsai and Ju-Wei Chen, “IEEE 802.11 MAC Protocol over Wireless Mesh Networks: Problems and Perspectives,” AINA 2005, 19th International Conference on vol. 2, 25-30, pp.60-63, March 2005.

[7] Internet Security System: Wireless LAN Security, and ISS Technical White Paper.

[8] Lidong Zhou, and Zygmunt J. Haas, “Securing Ad hoc Networks,” IEEE Network, vol.13, no.6, pp.24-30, November/December, 1999.