【作者】 年轶；

【导师】 周莲英；

【作者基本信息】 江苏大学 ， 计算机应用技术， 2005， 硕士

【摘要】 无线局域网是计算机网络和无线通信技术相结合的产物,其具有可移动性强、成本低、能显著提高工作效率等优点,因而存在着巨大的应用市场,目前已成为商业网络中一个必要的组成部分。但是,由于传输信道的开放性,无线局域网比有线局域网更容易遭受攻击,必须将无线局域网的安全问题摆在前所未有的重要位置。否则,安全问题将会成为无线局域网产业发展中的最大阻力。 IEEE 802.11是无线局域网的主要标准,相应的安全机制主要有身份认证和加密,且加密的安全研究主要在数据链路层,常用的协议是有线等效保密协议WEP。但研究表明,WEP协议在诸多方面还存在缺陷。本文采用针对网络层的安全协议IPSec作为无线局域网安全技术的重要补充。IPSec是目前适用于Internet通信的最易扩展、最完整的一种网络安全技术,利用它所建立的通道具有更好的安全性和可靠性。 本文简要介绍了IEEE 802.11无线局域网的拓扑结构和协议层次结构,并揭示了无线局域网体系结构与相应的网络安全的关系。 详细探讨了IEEE 802.11无线局域网的安全机制——认证机制和加密机制,并对基于WEP机制的无线局域网安全性能进行了具体分析,说明WEP的不足。在此基础上,提出了基于IPSec的无线局域网的安全机制。 具体分析研究了IPSec协议族的体系结构、工作模式和三个主要协议,包括验证头AH、封装安全载荷ESP、密钥管理IKE。 重点提出了基于IPSec无线局域网安全解决方案及相应的方案实现,方案设计包括VPN远程无线通信模型与通信规程,IPSec安全实现模型、安全通信协议与安全通信流程;方案实现包括验证头AH、封装安全载荷ESP、密钥管理IKE等的设计实现。 论文的最后是论文的工作总结以及后续研究方向的进一步展望。更多还原

【Abstract】 Wireless Local Area Network (WLAN) is the product of computer network and wireless communication. It has many advantages, such as portability, low cost and high efficiency, so it has a great deal of applications. At present, WLAN has become an essential part of the commercial network. But WLAN is attacked more easily than Local Area Network (LAN), because its transmission channel is open. We must put a premium on wireless security. Otherwise the problem of wireless security will arrest development of WLAN.IEEE 802.11 is the fundamental standard of WLAN. Its security strategy is mainly comprised of authentication and encryption. Research of encryption is on Logical Link Control (LLC) layer. The normal protocol of encryption is Wired Equivalent Privacy (WEP). However it has been proved that WEP has many weaknesses by a lot of research. This paper adopts IP Security (IPSec) as the important supplementary for wireless security strategy. IPSec is the security protocol for network layer. It’s the most complete technical of network security for Internet and apt to extend. The tunnel which is built by IPSec is much more secure and reliable.First, this article introduces the topology architecture and protocol hierarchical structure of 802.11 WLAN. It discovers the relationship between its protocol hierarchical structure and its security-Second, this paper makes a survey of 802.11 wireless security mechanisms which include authentication and encryption. It analyzes the wireless security based on WEP algorithm and demonstrates the faults of WEP. After that, it presents a security solution for WLAN based on IP Security (IPSec).Third, the article studies IPSec architecture, working mode and main protocols which include Authentication Header (AH), Encapsulating Security Payload (ESP) and Internet key exchange (IKE).Then, the paper puts forward solution for WLAN security problem based on IPSec. It designs a remote communication model and communication rules based on VPN, a security implementation model of IPSec, a security communication protocol and the security communication flow. It implements AH, ESP and IKE in Linux operating system.Finally, it summarizes the features of this article, and gives prospective view of the future research.更多还原