Research On WLAN Security Analysis System

Since its birth, WLAN (Wireless Local Area Network) has been widely used in many areas and makes the communication of people more convinient. But while bringing convenience, because of WLAN's characteristic of transmission media exposure and it's inadequate security mechanism, there are a large number of security vulnerabilities and threats. In the scenarios with large amount of WLANs deployed and applied, it is particularly important to design a wireless security detection system for doing intrusion detection on its existing security attacks and assessing its safety.This paper firstly did research on WLAN's security mechanisms and security threats. WLAN security has three major international standards: 802.11, 802.11i and WAPI proposed by China. These three are incremental on the level of security. To a certain extent, they are safe, but they all have common or unique vulnerabilities and thus failed to eliminate the WLAN security risks. Attacks against these vulnerabilities are abounding. This paper did researches on these issues firstly.WLAN security detection theory and technology is the next content this paper going to reaseach on. There are three security detection technologies: intrusion detection system, passive security analysis technology and active security analysis technology. Among these three technologies, intrusion detection system is based on the traditional security detection framework, passive security analysis technology is based on protocol analysis theory, active security analysis technology is based on protocol testing theory, which is the difference between this paper and the traditional security detection technology.Based on the research on WLAN security mechanism, security threats analysis and security detection technology, this paper proposed and designed a distributed WLAN security detection system, and mainly did the following works:1. Proposed a distributed WLAN security detection system, which was divided into three parts: the control center(CC), safety management server(Server) and wireless security analysis terminal(Agent). The framework and functional requirements of the system's each part were fully analyzed.2. Did outline design of the distributed WLAN security detection system and given the hardware design of the wireless security analysis terminal.3. Performed detailed software design on the wireless security analysis terminal, of which modular and hierarchical design was implemented to the software architecture.4. Using distributed security detection system designed by this paper, setting up test environment, implemented passive and active security analysis tests on WLAN scenarios.The combined security test results showed that the distributed system can be used on WLAN security detection and achieve high pereformance.