CN101835144A - Method and device for carrying out safety detection on wireless network - Google Patents
Method and device for carrying out safety detection on wireless network Download PDFInfo
- Publication number
- CN101835144A CN101835144A CN201010181872A CN201010181872A CN101835144A CN 101835144 A CN101835144 A CN 101835144A CN 201010181872 A CN201010181872 A CN 201010181872A CN 201010181872 A CN201010181872 A CN 201010181872A CN 101835144 A CN101835144 A CN 101835144A
- Authority
- CN
- China
- Prior art keywords
- wireless network
- analysis
- safety detection
- response message
- management control
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
The embodiment of the invention provides a method and a device for carrying out safety detection on a wireless network. The method mainly comprises the following steps of: setting an active attack script for safety detection; generating a test message according to the active attack script; transmitting the test message in the wireless network; receiving a response message transmitted after a test terminal in the wireless network processes the test message, and calculating and analyzing the response message to obtain a statistical result and an analyzing result of the response message; and carrying out comprehensive analysis on the active attack script according to the statistical result and the analyzing result to obtain a safety detection result of the wireless network. The embodiment of the invention carries out active attack on the wireless network by utilizing the test message to detect a safety flaw probably existing in the wireless network, comprehensively and effectively carries out safety analysis on the wireless network to provide comprehensive analysis evaluating data for the safety guide of the wireless network, and can improve the safety of the wireless network to a great extent.
Description
Technical field
The present invention relates to wireless communication technology field, relate in particular to a kind of method and apparatus that wireless network is carried out safety detection.
Background technology
WLAN (Wireless local area network, WLAN (wireless local area network)) is the product that computer network and wireless communication technology combine, WLAN utilizes RF (Radio Frequency, radio frequency) technology is carried out transfer of data, avoided of the constraint of cable network cable to the user, make the user can be at any time, access network everywhere, thereby can utilize Internet resources easily.
Along with WLAN (wireless local area network) use increasingly extensive, its safety problem also more and more is subjected to people's attention.For cable network, to specific destination, under the situation that physical link is destroyed, just might reveal usually by data by cable transmission for data.And in WLAN (wireless local area network), data are aloft to propagate, as long as in the scope that WAP (wireless access point) covers, terminal can receive wireless signal, and WAP (wireless access point) can not be directed to signal a specific receiving equipment.The publicity of transmission medium has brought WLAN easier to be under attack in this WLAN (wireless local area network), so the safety problem of WLAN (wireless local area network) seems particularly outstanding.
In order to guarantee secure communication, worked out corresponding safety standard in the WLAN (wireless local area network), but the safety standard of working out in the WLAN (wireless local area network) also can not guarantee the fail safe of WLAN (wireless local area network) fully, has multiple safety problem.
A kind of method that WLAN is carried out safety detection of the prior art is: utilize the catching of message, decoding and specific character string filtering function to find WAP (wireless access point) and client among the WLAN, message to described WAP (wireless access point) and client carries out multianalysis, thereby detect and orient the malice access point, reach the purpose of the fail safe that detects WLAN.
In realizing process of the present invention, the inventor finds of the prior artly WLAN to be carried out the method for safety detection there are the following problems at least: although can detect and orient malice access point among the WLAN, but this scheme is primarily aimed at WLAN carries out the passive security detection, can not carry out safety detection to WLAN all sidedly.
Summary of the invention
Embodiments of the invention provide a kind of wireless network have been carried out the method and apparatus of safety detection, to realize that wireless network is carried out safety detection initiatively.
A kind of wireless network is carried out the device of safety detection, comprising:
Management control module is used to be provided for the active attack script of safety detection, and the management control command of carrying described active attack script is handed down to analysis and processing module;
Analysis and processing module is used for being provided with according to described management control command the value of each special domain of test packet, generates corresponding test packet, and described test packet is sent to the packet sending and receiving processing module;
The packet sending and receiving processing module is used for described test packet is sent to wireless network, and the test terminal in the reception wireless network generates response message after described test packet is handled, and described response message is sent to analysis and processing module;
Described analysis and processing module also is used for the statistics and the parsing of described response message, obtains the statistics and the analysis result of response message, and described statistics and analysis result are sent to management control module;
Described management control module also is used for statistics and analysis result according to described message, and described active attack script carries out analysis-by-synthesis, obtains the safety detection result of described wireless network.
A kind of wireless network is carried out the method for safety detection, comprising:
Be provided for the active attack script of safety detection, generate test packet, described test packet is sent in the wireless network according to described active attack script;
The response message that the back sends is handled to described test packet in the test terminal that receives in the wireless network, and described response message is added up and resolved, and obtains the statistics and the analysis result of response message;
According to described statistics and analysis result, and described active attack script carries out analysis-by-synthesis, obtains the safety detection result of described wireless network.
The technical scheme that is provided by the embodiment of the invention described above as can be seen, the embodiment of the invention utilizes test packet that wireless network is carried out active attack, the security breaches that may exist with the detection wireless network, comprehensively and effectively to wireless network safety analysis, and then provide comprehensive analysis evaluation and test data, the fail safe that can improve wireless network largely for the safely instruction of wireless network.
Description of drawings
In order to be illustrated more clearly in the technical scheme of the embodiment of the invention, the accompanying drawing of required use is done to introduce simply in will describing embodiment below, apparently, accompanying drawing in describing below only is some embodiments of the present invention, for those of ordinary skills, under the prerequisite of not paying creative work, can also obtain other accompanying drawing according to these accompanying drawings.
A kind of structure chart that wireless network is carried out the device of safety detection initiatively that Fig. 1 provides for the embodiment of the invention one;
A kind of process chart that wireless network is carried out the method for safety detection initiatively that Fig. 2 provides for the embodiment of the invention two.
Embodiment
In the embodiment of the invention, be provided for the active attack script of safety detection, generate test packet, described test packet is sent in the wireless network according to described active attack script.The response message that the back sends is handled to described test packet in the test terminal that receives in the wireless network, described response message is added up and resolved, obtain the statistics and the analysis result of response message, according to described statistics and analysis result, and described active attack script carries out analysis-by-synthesis, obtains the safety detection result of described wireless network.
For ease of understanding, be that example is further explained explanation below in conjunction with accompanying drawing with several specific embodiments, and each embodiment does not constitute the qualification to the embodiment of the invention to the embodiment of the invention.
Embodiment one
This embodiment provides a kind of wireless network has been carried out the device of safety detection initiatively, and this device can be the main controlled node in the wireless network.This device generates test packet by the active attack script that sets in advance, and utilizes test packet that wireless network is carried out active attack, obtains the safety detection result of wireless network.
The structure of the above-mentioned device that wireless network is carried out safety detection initiatively comprises following module: management control module 11, rule parsing module 12, analysis and processing module 13 and packet sending and receiving processing module 14 as shown in Figure 1.
Management control module 11 is used to be provided for the active attack script of safety detection, and the management control command of carrying described active attack script is handed down to the rule parsing module, and analysis and processing module is carried out the control corresponding bookkeeping.The statistics and the analysis result of the response message that sends according to analysis and processing module, and the test result of active attack carries out analysis-by-synthesis, obtains the safety detection result of described wireless network.
Rule parsing module 12, be used for the management control command that the receiving management control module sends, the call instruction resolver is resolved described management control command, and the mapping ruler according to analysis result generation message sends to analysis and processing module and management control module with this mapping ruler.
Analysis and processing module 13 is used for being provided with according to described mapping ruler the value of each special domain of test packet, constructs corresponding test packet, and described test packet is sent to the packet sending and receiving processing module.The response message that described packet sending and receiving processing module is sent carries out preliminary treatment, statistics and parsing, obtains the statistics and the analysis result of response message, and described statistics and analysis result are sent to management control module;
Packet sending and receiving processing module 14 is used for described test packet is sent to wireless network, and the response message that the back sends is handled to described test packet in the test terminal that receives in the wireless network, and described response message is sent to analysis and processing module.
Described management control module 11 specifically comprises:
The management control command issues module 111, be used for the active attack script that topological structure and network state according to wireless network are provided for safety detection, the management control command of carrying described active attack script is handed down to described rule parsing module and analysis and processing module;
Safety detection result acquisition module 112 is used for statistics and analysis result according to the message of described analysis and processing module transmission, and described active attack script and mapping ruler, carries out analysis-by-synthesis, evaluation, obtains the safety detection result of wireless network.
Described analysis and processing module 13 specifically comprises:
Test packet generation module 131 is used for being provided with according to the mapping ruler that described rule parsing module sends the value of each special domain of test packet, constructs corresponding test packet, and described test packet is sent to the packet sending and receiving processing module;
Response message processing module 132, be used for the response message that receives is filtered and buffer memory, response message to described buffer memory is added up according to speed, protocol type, type of message, obtain the statistics of response message, according to described mapping ruler the response message of buffer memory is resolved, read the value of each special domain in the response message, obtain the analysis result of response message, the statistics and the analysis result of described response message sent to management control module.
Wireless network analysis module 133, be used for the message of the wireless network that receives is analyzed, set up the topological structure and the network state of wireless network according to analysis result, the topological structure and the network state of this wireless network sent to described management control module.
Embodiment two
Shown in Figure 1 wireless network is carried out the device of safety detection initiatively based on above-mentioned, the handling process of a kind of method of wireless network being carried out safety detection initiatively that this embodiment provides comprises following treatment step as shown in Figure 2:
The management control command that step 21, management control module will carry active attack script is handed down to the rule parsing module.
After the above-mentioned device that wireless network is carried out safety detection initiatively starts, the packet sending and receiving processing module in the said apparatus will be caught the message in the interior wireless network of certain limit, and the message of catching is sent to analysis and processing module.Analysis and processing module is analyzed the message that receives, set up the topological structure and the network state of wireless network according to analysis result, the topological structure of this wireless network and network state are sent to management control module in the device, and management control module carries out simple internet security assessment according to the topological structure and the network state of the wireless network that receives to wireless network.
Then, above-mentioned management control module is according to the topological structure and the network state of existing wireless network, and the internet security assessment result is provided for the active attack script of safety detection, and the management control command of carrying above-mentioned active attack script is handed down to rule parsing module in the said apparatus.
Above-mentioned rule parsing module invokes command analysis device is resolved above-mentioned management control command, and the mapping ruler according to the generation of the active attack script in above-mentioned management control command message sends to analysis and processing module and management control module with this mapping ruler.
The mapping ruler that analysis and processing module sends according to above-mentioned rule parsing module is provided with the value of each special domain of test packet, constructs corresponding test packet.Then, by the packet sending and receiving processing module in the said apparatus above-mentioned test packet is sent in the wireless network.
The test packet that packet sending and receiving processing module in the said apparatus sends is received by the test terminal in the wireless network, and above-mentioned test terminal sends to response message in the wireless network again after test packet is handled accordingly.
Packet sending and receiving processing module in the said apparatus is caught the message in the interior wireless network of certain limit once more, and the response message that the above-mentioned test terminal that captures is sent sends to analysis and processing module.
Above-mentioned analysis and processing module is carried out preliminary treatment to the response message that receives, and this preliminary treatment mainly comprises: according to the filtering rule that sets in advance the response message that receives is filtered, the response message that obtains after filtering is carried out buffer memory.
Above-mentioned analysis and processing module is added up according to different types such as speed, protocol type, type of messages the response message of above-mentioned buffer memory, obtains the statistics of response message.Above-mentioned analysis and processing module is also resolved the response message of buffer memory according to above-mentioned mapping ruler, reads the value of each special domain in the response message, obtains the analysis result of response message.Above-mentioned analysis and processing module sends to management control module with the statistics and the analysis result of above-mentioned response message.
Management control module is according to the statistics and the analysis result of the message of above-mentioned analysis and processing module transmission, and the test result of above-mentioned active attack script and mapping ruler, active attack, carry out analysis-by-synthesis, evaluation, obtain the safety detection result of wireless network.
Testing process among the above-mentioned steps 21-24 can be carried out repeatedly, obtains a plurality of safety detection result of above-mentioned wireless network.At last, a plurality of safety detection result of management control module analysis-by-synthesis wireless network are obtained the final safety detection result of wireless network.
The described method and apparatus that wireless network is carried out safety detection initiatively of the invention described above embodiment goes for wireless networks such as WLAN.
One of ordinary skill in the art will appreciate that all or part of flow process that realizes in the foregoing description method, be to instruct relevant hardware to finish by computer program, described program can be stored in the computer read/write memory medium, this program can comprise the flow process as the embodiment of above-mentioned each side method when carrying out.Wherein, described storage medium can be magnetic disc, CD, read-only storage memory body (Read-Only Memory, ROM) or at random store memory body (Random AccessMemory, RAM) etc.
In sum, the embodiment of the invention has proposed a kind of method and apparatus that more fully wireless networks such as WLAN is carried out safety detection initiatively at the deficiency of existing wireless LAN safety analytic product.The embodiment of the invention is carried out active attack by utilizing test packet to wireless network, the security breaches that may exist with the detection wireless network, can be fully and effectively to wireless network safety analysis, and then provide comprehensive analysis evaluation and test data, the fail safe that can improve wireless network largely for the safely instruction of wireless network.
The embodiment of the invention can adapt to multiple Radio Link, supports active safety analysis and passive security analytic function simultaneously, and supports the Wi-Fi protocol suite, is with good expansibility, and can implement the analysis strategy of user's design.
The above; only for the preferable embodiment of the present invention, but protection scope of the present invention is not limited thereto, and anyly is familiar with those skilled in the art in the technical scope that the present invention discloses; the variation that can expect easily or replacement all should be encompassed within protection scope of the present invention.Therefore, protection scope of the present invention should be as the criterion with the protection range of claim.
Claims (10)
1. one kind is carried out the device of safety detection to wireless network, it is characterized in that, comprising:
Management control module is used to be provided for the active attack script of safety detection, and the management control command of carrying described active attack script is handed down to analysis and processing module;
Analysis and processing module is used for being provided with according to described management control command the value of each special domain of test packet, generates corresponding test packet, and described test packet is sent to the packet sending and receiving processing module;
The packet sending and receiving processing module is used for described test packet is sent to wireless network, and the response message that generates and sends is afterwards handled to described test packet in the test terminal that receives in the wireless network, and described response message is sent to analysis and processing module;
Described analysis and processing module also is used for the statistics and the parsing of described response message, obtains the statistics and the analysis result of response message, and described statistics and analysis result are sent to management control module;
Described management control module also is used for statistics and analysis result according to described message, and described active attack script carries out analysis-by-synthesis, obtains the safety detection result of described wireless network.
2. according to claim 1 wireless network is carried out the device of safety detection, it is characterized in that described device also comprises:
The rule parsing module, be used for the management control command that the receiving management control module sends, the call instruction resolver is resolved described management control command, and the mapping ruler according to analysis result generation test packet sends to analysis and processing module and management control module with this mapping ruler.
3. according to claim 2 wireless network is carried out the device of safety detection, it is characterized in that described management control module specifically comprises:
The management control command issues module, is used for the active attack script that topological structure and network state according to wireless network are provided with safety detection, and the management control command of carrying described active attack script is handed down to described rule parsing module and analysis and processing module;
The safety detection result acquisition module is used for statistics and analysis result according to the message of described analysis and processing module transmission, and described active attack script and mapping ruler, carries out analysis-by-synthesis, evaluation, obtains the safety detection result of wireless network.
4. described wireless network is carried out the device of safety detection according to claim 2 or 3, it is characterized in that described analysis and processing module specifically comprises:
The test packet generation module is used for being provided with according to the mapping ruler that described rule parsing module sends the value of each special domain of test packet, constructs corresponding test packet, and described test packet is sent to the packet sending and receiving processing module;
The response message processing module, be used for the response message that receives is filtered and buffer memory, response message to described buffer memory is added up according to speed, protocol type, type of message, obtain the statistics of response message, according to described mapping ruler the response message of buffer memory is resolved, read the value of each special domain in the response message, obtain the analysis result of response message, the statistics and the analysis result of described response message sent to management control module.
5. according to claim 4 wireless network is carried out the device of safety detection, it is characterized in that described analysis and processing module also comprises:
The wireless network analysis module is used for the message of the wireless network that receives is analyzed, and sets up the topological structure and the network state of wireless network according to analysis result, and the topological structure and the network state of this wireless network sent to described management control module.
6. one kind is carried out the method for safety detection to wireless network, it is characterized in that, comprising:
Be provided for the active attack script of safety detection, generate test packet, described test packet is sent in the wireless network according to described active attack script;
The response message that generates and sends is afterwards handled to described test packet in the test terminal that receives in the wireless network, and described response message is added up and resolved, and obtains the statistics and the analysis result of response message;
According to described statistics and analysis result, and described active attack script carries out analysis-by-synthesis, obtains the safety detection result of described wireless network.
7. according to claim 6 wireless network is carried out the method for safety detection, it is characterized in that the described active attack script that is provided for safety detection specifically comprises:
Message in the wireless network that receives is analyzed, set up the topological structure and the network state of wireless network according to analysis result, the active attack script that is provided for safety detection according to the topological structure and the network state of wireless network, and structure carries the management control command of described active attack script.
8. according to claim 7 wireless network is carried out the method for safety detection, it is characterized in that, describedly generate test packet, described test packet is sent in the wireless network, specifically comprise according to described active attack script:
By the command analysis device management control command of carrying described active attack script is resolved, generate the mapping ruler of message, the value of each special domain of test packet is set, construct corresponding test packet according to described mapping ruler according to analysis result.
9. according to claim 8 wireless network is carried out the method for safety detection, it is characterized in that, described described response message is added up and resolved, obtain the statistics and the analysis result of response message, specifically comprise:
Described response message is filtered and buffer memory, response message to described buffer memory is added up according to speed, protocol type, type of message, obtain the statistics of response message, according to described mapping ruler the response message of buffer memory is resolved, read the value of each special domain in the response message, obtain the analysis result of response message.
10. according to Claim 8 or 9 described methods of wireless network being carried out safety detection, it is characterized in that, described according to described statistics and analysis result, and described active attack script is carried out analysis-by-synthesis, obtain the safety detection result of described wireless network, specifically comprise:
According to described statistics and analysis result, and described active attack script and mapping ruler, carry out analysis-by-synthesis, evaluation, obtain the safety detection result of wireless network;
Send a plurality of described test packets, obtain a plurality of safety detection result of described wireless network according to a plurality of response messages that receive, the described a plurality of safety detection result of analysis-by-synthesis are obtained the final safety detection result of wireless network.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201010181872A CN101835144A (en) | 2010-05-25 | 2010-05-25 | Method and device for carrying out safety detection on wireless network |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201010181872A CN101835144A (en) | 2010-05-25 | 2010-05-25 | Method and device for carrying out safety detection on wireless network |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN101835144A true CN101835144A (en) | 2010-09-15 |
Family
ID=42719034
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201010181872A Pending CN101835144A (en) | 2010-05-25 | 2010-05-25 | Method and device for carrying out safety detection on wireless network |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101835144A (en) |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104219218A (en) * | 2013-06-04 | 2014-12-17 | 杭州华三通信技术有限公司 | Active safety defense method and active safety defense device |
| CN105262777A (en) * | 2015-11-13 | 2016-01-20 | 北京奇虎科技有限公司 | Local area network (LAN)-based security detection method and device |
| CN107888598A (en) * | 2017-11-17 | 2018-04-06 | 中广核工程有限公司 | A kind of nuclear power station secondary electrical system Information Security Risk evaluating system and method |
| CN109873704A (en) * | 2017-12-01 | 2019-06-11 | 中国信息通信研究院 | A kind of network security risk evaluation system and method based on run time behaviour analysis |
| CN113115356A (en) * | 2020-01-13 | 2021-07-13 | 广州致远电子有限公司 | Wireless signal detection system, wireless signal detection method and wireless signal detection equipment |
-
2010
- 2010-05-25 CN CN201010181872A patent/CN101835144A/en active Pending
Cited By (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104219218A (en) * | 2013-06-04 | 2014-12-17 | 杭州华三通信技术有限公司 | Active safety defense method and active safety defense device |
| CN104219218B (en) * | 2013-06-04 | 2018-05-08 | 新华三技术有限公司 | A kind of method and device of active safety defence |
| CN105262777A (en) * | 2015-11-13 | 2016-01-20 | 北京奇虎科技有限公司 | Local area network (LAN)-based security detection method and device |
| WO2017080424A1 (en) * | 2015-11-13 | 2017-05-18 | 北京奇虎科技有限公司 | Security detection method and apparatus based on local area network |
| CN107888598A (en) * | 2017-11-17 | 2018-04-06 | 中广核工程有限公司 | A kind of nuclear power station secondary electrical system Information Security Risk evaluating system and method |
| CN107888598B (en) * | 2017-11-17 | 2020-08-11 | 中广核工程有限公司 | Nuclear power station electrical secondary system information safety risk evaluation system and method |
| CN109873704A (en) * | 2017-12-01 | 2019-06-11 | 中国信息通信研究院 | A kind of network security risk evaluation system and method based on run time behaviour analysis |
| CN113115356A (en) * | 2020-01-13 | 2021-07-13 | 广州致远电子有限公司 | Wireless signal detection system, wireless signal detection method and wireless signal detection equipment |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN105227383B (en) | A kind of device of network topology investigation | |
| US20200045073A1 (en) | Test system and method for identifying security vulnerabilities of a device under test | |
| CN103338475B (en) | The method of testing of WAP (wireless access point) and device, test terminal | |
| CN102035793B (en) | Botnet detecting method, device and network security protective equipment | |
| CN106973401B (en) | Detection suppression method for illegal AP in wireless networking environment | |
| US9351180B2 (en) | Communication system, wireless communication apparatus and state information receiving apparatus | |
| CN103701825A (en) | Security testing system oriented to mobile intelligent terminal IPv6 protocol and application of protocol | |
| CN101931982A (en) | Network failure positioning method and device | |
| CN103037373A (en) | Wireless node blocking system | |
| CN101835144A (en) | Method and device for carrying out safety detection on wireless network | |
| CN105306414A (en) | Port vulnerability detection method, device and system | |
| CN105208645A (en) | WiFi transmission power value regulation method and device | |
| CN107086934A (en) | The collocation method and gateway of networking equipment | |
| CN102316498A (en) | Automatic test method and system for wireless network | |
| CN103856959B (en) | Wireless LAN quality control method, equipment and system | |
| CN102970771A (en) | Signal detection and acquisition method and system based on wireless sensor network | |
| CN101902759A (en) | Wireless network safety analysis method and device based on protocol testing | |
| CN112333019B (en) | Router configuration and test method and system and readable storage medium | |
| CN104469665A (en) | Data processing method and user terminals | |
| CN105188062B (en) | It divulges a secret means of defence and device | |
| CN101902758A (en) | Protocol testing based data processing method for wireless network and device thereof | |
| CN111432453B (en) | Communication channel determination method, device and equipment | |
| CN102843690B (en) | Wireless access point-based penetration test system and test method thereof | |
| CN108173791A (en) | The blind authentication method of physical layer and system of time-varying fading channels based on smoothing technique | |
| CN107395573A (en) | The detection method and device of a kind of industrial control system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C02 | Deemed withdrawal of patent application after publication (patent law 2001) | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Application publication date: 20100915 |