高隐蔽性的无线网络主动钓鱼攻击及其防范研究

高隐蔽性的无线网络主动钓鱼攻击及其防范研究 A Stealthy Wireless Active Phishing Attack and Countermeasure 陈伟 CHEN Wei1 1 2 first-author 顾杨 GU Yang1 1 于乐 YU Le1 1 南京邮电大学计算机学院 南京邮电大学计算机学院 School of Computer Science and Technology,Nanjing University of Posts and Telecommunications School of Computer Science and Technology,Nanjing University of Posts and Telecommunications 江苏省无线传感网高技术研究重点实验室 江苏省无线传感网高技术研究重点实验室 Jiangsu High Technology Research Key Laboratory for Wireless Sensor Networks Jiangsu High Technology Research Key Laboratory for Wireless Sensor Networks 提出一种新的无线网络钓鱼攻击,该攻击采用主动攻击方式,将受害者切换到钓鱼无线接入点,同时使用低速率无线网络攻击以提高隐蔽性,并讨论了高隐蔽性无线主动钓鱼攻击模型和攻击条件,给出了一种实现此攻击的具体方法以证明其可行性.同时,针对该类型攻击提出了一种基于累加和控制（CUSUM）的检测方法,并验证了其有效性. This paper proposes a novel wireless phishing attack which uses active methods to switch victim to rogue phishing wireless access points.This attack utilizes stealthy row-rate wireless jamming attack to hide itself.This paper discusses the attacking model and the conditions of this stealthy active attack.A detailed method is given to show the feasibility of this attack.To defense against this attack,we propose a cumulative sum（CUSUM）-based detection method.The simulation results show that our method can efficiently detect this wireless phishing attack. 无线网络安全 钓鱼攻击 主动攻击 变化点检测 wireless network security phishing attack active attack change point detection 10.14188/j.1671-8836.2013.02.011 TP393.08 国家重点基础研究发展计划（973）项目（2011CB302903）;国家自然科学基金（61202353,61272084）;江苏高校优势学科建设工程（YX002001）资助项目 2013-02-01 2021-04-01 2 59