一种基于位置指纹的WLAN攻击检测与定位方法

摘要

Current network security technology has difficulty in effectively detecting and preventing MAC spoofing attack against WLAN, moreover,to locate the attacking source has greater hurdle.For these problems,we proposed a novel attack detection and localisation meth-od.The method makes use of the physical characteristic of RSSI of radio signal that it is difficult to be counterfeited,and adopts the improved k-means clustering algorithm to reduce fluctuation influence of environmental factor on the RSSI,and constructs the RSSI-based Radio Map. By using RSSI location fingerprint matching technology,it detects the MAC spoofing attack and locates the attacking source.The method is tested under WLAN IEEE 802.1 1 g,and the results show that the method has the advantages of high attack detection rate and accurate attac-king source localisation.%针对现有网络安全技术对WLAN的MAC地址欺骗攻击很难进行有效检测与防范，对攻击源定位困难性更大的问题，提出一种新颖的攻击检测与定位方法。该方法利用无线信号的RSSI很难被伪造的特性，采用改进的K-means聚类算法降低环境因素对RSSI带来的波动影响，构造了基于RSSI的Radio Map，利用RSSI位置指纹匹配技术对MAC地址欺骗攻击进行检测并对攻击源定位。通过在IEEE 802．11 g环境下进行的测试结果表明，该方法具有攻击检测率高及攻击源定位准确的优点。