Security Analysis of Application Layer Protocols on Wireless Local Area Networks

• 作 者: 杨明豪
• 机 构: Department of Information & Computer Engineering, Chung Yuan Christian University,
• 出 处: Journal of Shanghai Jiaotong University(Science)
• 发表日期: 2011年05期
• 关键词: users automatically authentication launch identifier secure details socket priva

This paper aims at analyzing the security issues that lie in the application layer (AL) protocols when users connect to the Internet via a wireless local area network (WLAN) through an access point. When adversaries launch deauthentication flood attacks cutting users’ connection, the connection managers will automatically research the last access point’s extended service set identifier (ESSID) and then re-establish connection. However, such re-connection can lead the users to a fake access point with the same ESSID set by attackers. As the attackers hide behind users’ access points, they can pass AL’s authentication and security schemes, e.g. secure socket layer (SSL). We have proved that they can even spy on users’ account details, passwords, data and privacy.

This paper aims at analyzing the security issues that lie in the application layer (AL) protocols when users connect to the Internet via a wireless local area network (WLAN) through an access point. When adversaries launch deauthentication flood attacks cutting users’ connection, the connection managers will automatically research the last access point’s extended service set identifier (ESSID) and then re-establish connection. However, such re-connection can lead the users to a fake access point with the same ESSID set by attackers. As the attackers hide behind users ’access points, they can pass AL’s authentication and security schemes, eg secure socket layer (SSL). We have proven that they can even spy on users’ account details, passwords, data and privacy.