| With the development of internet technology, the wireless LAN emerged as the times require. It makes the thing that customers can access to the broadband at anytime, anywhere become true. This technology has been widely applied in many fields where has difficult with the network cabling and installation, like hospital, shop, factory, school and so on. In the same time, the openness of the wireless medium for public access brings a lot of security problems. The related organizations like IEEE set up a series of security standards which define the standards of the data encryption and user authentication. However, there are still some design defects of these safety precautions after researches. They cannot guarantee the security of the wireless LAN.This paper focuses on the study of the security analysis and detection of WLAN security protocols. The research contents three parts:Firstly, analysis methods of protocol security are studied. According to the ability of attackers, from the aspect of the role which attckers can play in the protocols(i.e., imitating normal protocol behavior or breaking normal communication), this paper analyze the security properties of 802.11 and 802.1X protocol, and classify attack behaviors on these.Secondly, test approaches of protocols under WLAN environment were studied. We proposed attack based active test methods which were based on the protocol security analysis. Through constructing protocol message sequences, they imitated attackers'aggressive behaviors to attack on protocol running subject, so as to determine whether there were security holes in protocols. The protocol test platform was constructed based on the above methods.Finally, we compiled test samples using Tcl scripting language to test some common aggressive behaviors in 802.11 and 802.1X. Test showed that known security holes aimed at 802.11 and 802.1X were covered by this method to some extend which efficiently combined the characteristics of attackers and testers. It was also good at discovering potential problems. In addition, this paper analyze the detection methods of attacking which are helpful to the study of WLAN IDS. |
