Method for resisting denial of service (DoS) attack for wireless local area network access authentication

Abstract

The invention discloses a method for resisting a denial of service (DoS) attack for a wireless access authentication protocol, which mainly solves the problem of DoS attack threat existing in the process of wireless access authentication of the traditional 802.11i protocol and the WAPI protocol. The method realizes the resistance on the DoS attack in the process of access authentication association by utilizing the combined use of a beacon frame issuing mechanism and a client-puzzle mechanism. The method comprises the following realizing steps of: (1) obtaining a beacon frame issued by an access point by a user in a monitoring way and obtaining the parameter needed for constructing a puzzle; (2) generating the puzzle and solving when the authentication interaction is finished; (3) containing the puzzle and the solution into an association request and transmitting the association request to the access point; and (4) judging whether the association process is finished or not by the access point through the authentication on the puzzle and the solution. The invention has stronger DoS attack resistance and adaptability and is suitable for the traditional wireless access authenticationprotocol.

Description

technical field [0001] The invention belongs to the field of network technology security, and specifically relates to a method for resisting denial of service DoS attacks in a wireless network environment, which can be used in a wireless local area network environment to reduce the impact of denial of service attacks on the access authentication process. technical background [0002] The main purpose of Denial of Service (DoS) attack is to make the service provided in the network lose availability. It is difficult to implement and has a high degree of harm. It is the biggest threat in the network at present. However, due to the openness of the Internet, it is impossible to prevent the existence of such attacks. Therefore, the goal of existing research is how to reduce the impact of DoS attacks on the network. [0003] Access security of wireless network has always been a hot research topic. Due to limitations of wireless network equipment and bandwidth resources, the acces...

AI Technical Summary

Problems solved by technology

[0037] Recently, some researchers have proposed the method of using wireless modules to construct puzzles to resist DoS attacks of wireless access authentication, but it also brings some other security risks, and there is still a long way to go before it is practical.

Therefore, the defense mechanism of the existing wireless access authentication protocol to the DoS attack is still not perfect.

Images