A Novel Anti-802.11 Wireless Deauthentication Frame Flood Denial of Service Attack Method

Abstract

The invention relates to a novel anti-802.11 wireless deauthentication frame flood denial-of-service attack method, and provides a queuing model based on 802.11 wireless clients, including a TCP / IP upper layer module, an MMS‑MDS module, a STA_Air_TX module, and a STA_Air_RX module; the TCP of the wireless client The / IP upper layer module sends the TCP data frame to the MDS queue and waits for the MMS‑MDS module to process in turn; when the wireless client is ready to send the data frame for communication, the MMS‑MDS module processes the TCP data frame and forwards it to the TX queue, STA_Air_TX The module sends TCP data frames to a wireless access point AP; an attacker RAP sends a deauthentication frame to the wireless client at a rate of λ2, and the STA_Air_RX module receives and checks the deauthentication frame and decides whether to forward it to the MMS queue Or directly discard it immediately; the STA_Air_RX module forwards it to the MDS queue after receiving a TCP-ACK; the MMS-MDS module completes the verification and deauthentication frame within the time S2. The invention can prevent the wireless local area network from the deauthentication and denial of service attack under low attack rate and high attack rate.

Description

technical field [0001] The invention relates to the technical field of denial-of-service attacks on wireless local area networks, in particular to a novel method for preventing 802.11 wireless deauthentication frame flood denial-of-service attacks. Background technique [0002] At present, denial of service attacks (Denial of Service: DoS) against wireless local area networks (Wireless Local Area Network: WLAN) are mainly caused by forged deauthentication frames (Deauthentication Frame). In general, DoS attacks on WLANs can be divided into two categories. One category includes attacks against wireless access points (Access Point: AP), which include authentication frame floods and association frame floods. Another type of attack includes deauthentication frame flood attack, and their attack targets are wireless LAN clients (such as some notebook computers, tablet computers, and smart phones with WiFi wireless communication functions, etc.). In the present invention, we main...

AI Technical Summary

Problems solved by technology

Therefore, the current version of the 802.11w method cannot effectively solve the deauthentication frame flood attack with a high attack rate

Images