Wireless phishing access point detection method based on authentication

Abstract

A wireless phishing access point detection method based on authentication is provided. The method comprises following steps: first, setting up an authentication server which is used for storing a routing node information database of all valid wireless access points; then the authentication server performing authentication by matching routing node information of a client side with the routing node information in the database according to an authentication request from the client side; finally, sending a matching authentication result to the client side. By means of the method, immediate check is realized when accessing a network, wireless phishing access points can be effectively identified, the detection and processing cost are reduced, and normal service traffic is not influenced. The method has practicability and low cost.

Description

technical field [0001] The invention relates to a technology in the field of network security, in particular to an authentication-based wireless phishing access point detection method. Background technique [0002] With the large-scale deployment of wireless access points (APs) in urban public places, wireless phishing access points have become a serious threat in wireless networks. A wireless phishing access point attack refers to an attacker setting up a disguised wireless access point in a public place, that is, a phishing access point, and setting the same service set identifier (SSID) as the real AP, so that the victim mistakenly connects to the wireless phishing access point. Access point, further attacks such as stealing passwords and personal sensitive information. A wireless phishing access point is defined as an illegal access point, which is not set up by the WLAN operator or administrator. Usually, the attacker connects the host device to a legally authorized o...

AI Technical Summary

Problems solved by technology

However, the technology is complicated to set up and takes up a lot of system resources

Specifically: first, this technology needs to configure a wireless controller for each wireless AP, the cost of network construction and maintenance is high, and the deployment is difficult

Second, the time and location of phishing access points in the wireless network are highly uncertain, and the attack duration is short. However, this technology requires all-round and all-weather scanning in an environment covering legal wireless network services. Great unnecessary consumption of system resources

Third, one of the conditions for a successful phishing attack on a wireless network is that the victim client is in an environment where the signal strength of the phishing access point is higher than that of a legally authorized wireless AP. Set up phishing access points in weak (or no signal) places. The effective scanning range of the wireless AP itself is limited, and generally cannot cover beyond the effective range of its wireless signal strength. This technology may have identification blind spots

Images