本文已被：浏览 1741次 下载 3523次
Received:November 23, 2011 Revised:January 09, 2011
Received:November 23, 2011 Revised:January 09, 2011
中文摘要: 针对当前流行的无线拒绝服务DoS、伪装STA、伪装AP、WarDriving、暴力破解等无线网络攻击,采用误用检测和异常检测结合的方式,设计并实现了一个针对无线局域网的轻量级无线网络入侵检测系统。系统采用用户自定义攻击规则库、自定义授权AP/STA 名单、自定义非法AP/STA 名单等方式,能针对无线网络具体环境和用户的不同需要,合理调整入侵检测灵敏度和攻击检测阈值。仿真试验表明,与市场上同类系统相比较,本系统能有效提高无线网络入侵检测效率,大大降低误报率和漏报率。
Abstract:Aiming at wireless network attacks such as DoS attacks,rouge STA, rouge AP,WarDriving attacks and bruteforce attacks, a Lightweight Intrusion Detection System for WLAN is implemented by combining the misuse detection and anomaly detection. In this system,the user can define attack rule set, authorization AP/STA list, illegal AP/STA list, and the sensitivity and the threshold value of detection can adjust according to the circumstance and user requirement. The test shows that this system has a better detecting effect than other WLAN intrusion detection in market.
文章编号： 中图分类号： 文献标志码：
基金项目:山东省自然科学基金(ZR2011FQ019D);济南市科技发展计划(201010002)
引用文本：
殷立峰,吴剑,马宾.轻量级无线网络入侵检测系统.计算机系统应用,2012,21(8):23-26
YIN Li-Feng,WU Jian,MA Bin.Lightweight Wireless Lan Intrusion Detection System.COMPUTER SYSTEMS APPLICATIONS,2012,21(8):23-26
殷立峰,吴剑,马宾.轻量级无线网络入侵检测系统.计算机系统应用,2012,21(8):23-26
YIN Li-Feng,WU Jian,MA Bin.Lightweight Wireless Lan Intrusion Detection System.COMPUTER SYSTEMS APPLICATIONS,2012,21(8):23-26
