802.1x無線區域網路安全分析與應用

Analysis and Application of 802.1x Wireless Local Area Network Security

林峻生(Lin Jun Sheng)

指導教授 ： 張春明

亞洲大學/資訊學院/資訊工程學系碩士班/碩士(2005年)

摘要

無線網路技術快速發展，在成本與便捷性的考量之下無線區域網路的應用已逐漸普及，然而無線網路的安全問題卻開始浮上檯面，原有的無線網路安全機制WEP被發現缺陷，相關的破解軟體也在網路上可以下載，不僅讓無線網路安全性受到質疑，也使得企業導入無線網路腳步放慢，並開始期待新的無線網路安全機制。新一代的無線網路安全機制802.11i目前尚未普及，因此802.1x能否解決無線網路安全問題攸關無線網路應用的發展，本研究以802.1x協定為主軸來討論無線區域網路安全問題，由WEP加密機制的原理及過程發現無線網路安全防護的問題所在，進而分析研究802.1x中有哪些方法幫助無線網路提供安全防護，並建構一個結合WEP、802.1x、Firewall、入侵偵測系統(IDS)及網路監測軟體的多重保全架構來提供無線網路全面化的安全防護，最後以DoS攻擊以及取消連結攻擊來確認多重保全架構的確可以達到無線網路防護的效果。

關鍵字

無線區域網路 ； 802.11i ； WEP ； 802.1x ； Firewall ； IDS

並列摘要

With the development of the WLAN technique, the usage of the WLAN is more and more popular because of its low cost and convenience. However, there are some privacy problems come out. The WEP is found out defects, and the software which is used to attack WLAN also can be downloaded from the internet. The security of the WLAN is not only doubted but also slows down the speed that the company uses the WLAN. People who use the internet are looking forward to a new technique to protect WLAN. The new protection of the WLAN, 802.11i, has not been popular nowadays. As a result, the development of the WLAN is considered whether 802.1x can solve the problems of the security of the WLAN. My research is taking 802.1x as the main idea to discuss the problems of security of the WLAN to look for the problems in the WLAN security according to the principle and the procedure in the WEP. Then to analyze and study how 802.1x can protect WLAN and analyze its advantages and disadvantages. At last, I will make a multiple protective structure which is combined by WEP, 802.1x, Firewall, IDS and network traffic analysis software to provide the totally protection of the WLAN. Also, I will use the software to do DoS attack and disassociation attack test to improve a multiple protective structure to provide the security of the WLAN.

並列關鍵字

WLAN ； 802.11i ； WEP ； 802.1x ； Firewall ； IDS

參考文獻

[1]楊家升，”無線網路原理與應用”，台灣，美商麥格羅.希爾國際股份有限公司，2002。

[3]余泰興，”無線網路之威脅與安全防護” ，台灣，美商麥格羅.希爾國際股份有限公司，2002。

[31] Pejman Roshan, “A Comprehensive Review of 802.11 Wireless LAN Security

and the Cisco Wireless Security Suite”, Cisco white paper,2002.

[39] Hessiog, Jordan, Simons, “Wireless Networking”, Utahgeeks, 2004/2/11.