A Study on Intrusion Detection System for 802.11 Wireless LAN

• Main Authors: bob, 蘇建誠
• Other Authors: 陳昱仁
• Format: Others
• Language: zh-TW
• Published: 2004
• Online Access: http://ndltd.ncl.edu.tw/handle/93512569415837664488

碩士 === 長庚大學 === 資訊管理研究所 === 92 === The use of Wireless Local Area Network (Wireless LAN, WLAN) has provided enough convenience, but there are actually security concerns in using it. In the paper "Your 802.11 Wireless Network Has No Clothes", published by William A. Arbaugh, Narendar Shankar and Y. C. Justin Wan in 2001, they pointed out the security threats of wireless LAN. Therefore, the security of wireless LAN will inevitably become an important issue in the enterprise information security management due to the gradual popularization of wireless LAN. Nowadays, most researches of wireless LAN security are focused on the flaws of Wired Equivalent Privacy (WEP), and the research of using intrusion detection techniques to enhance the wireless LAN security is minor. Because wireless LAN is the extending of wired network, there is network traffic when using, and network activities can be observed and analyzed by taking advantage of network traffic. By doing analysis of network traffic records, we can detect anomaly behavior in the network, and provide important monitoring information to network administrator. Moreover, by recording the connection flows and related frame fields of wireless LAN, we can provide monitoring and auditing for wireless network security. In this research, we develop a prototype of passive network traffic monitoring system by using the anomaly detection methods of intrusion detection to monitor network packets, discover the unauthorized users, detect the anomaly networking behaviors, and enhance the wireless network security.