摘要
在无线的环境下,入侵者将会通过WAP而入侵到无线局域网络,为了能提早侦测出攻击的行为,因此我们通过更改WAP韧体的技术,将WAP视为侦测入侵的传感器,且将侦测重点放在目前最广为大家所使用的802.11标准的无线局域网络。本论文提出一个结合集中与分散架构的分布式无线入侵侦测系统,通过多个WAP取得资料、分析资料后,再将结果交由分布式入侵侦测协调者做进一步的分析控制。系统实验结果显示,本系统确实能有效侦测无线网络入侵行为。
In this paper, we propose a distributed wireless intrusion detection system （DWIDS） for 802.11 WLAN. The pro- posed system is a hybrid of distributed and centralized architecture. In wireless networks, intruders may attack WLAN via wireless access point （AP）. Therefore, AP can be used as the distributed sensors for detecting intrusions in the first place. In order to do it, we modified the firmware of AP and installed Snort - wireless and Kismet on AP for collecting and analyzing data. The analyzed data from different APs are then sent to the DWIDS coordinator for further processing. The implementation and experimental results show that the proposed system indeed detects several types of intrusions from WLAN.
出处
《攀枝花学院学报》
2010年第6期36-39,共4页
Journal of Panzhihua University
关键词
无线存取点
无线局域网络
分布式入侵侦测系统
wireless access point
wireless local area network
distributed wireless intrusion detection system
