KR101015648B1 - Geographic Information System based Wi-Fi WarDriving Hacking Protection System - Google Patents

Abstract

Currently, wireless security technologies such as WEP and WPA are emerging in relation to wireless LAN, but due to lack of security awareness of wireless networks by general users, it is easy for external intruders to access wireless networks, and various security risks exist. Doing. In particular, when illegal intruders use WordDriving to access wireless access point (AP) to obtain information, the user's information may be exposed through the wireless network, resulting in loss of intangible assets of companies and individuals. Therefore, in the present invention, it is an object to configure a preventive system by preparing a risk for security in advance, and to enable the integrated management of the current status of the security risk for the end nodes accessing the wireless LAN based on GIS. To this end, we apply the mapping technology that utilizes the latest Geographic Information System (GIS). Visualize security risks based on Geographic Information System (GIS) to induce visualization of information.

WarDriving, WPA, WEP, GPS, GIS, WLAN, Security

Description

Geographic Information System based Wi-Fi WarDriving Hacking Protection System

Word-living refers to an activity of moving a specific area to a vehicle, moving an area where wireless APs are concentrated, and mapping related AP access information. Recently, the use of various information devices such as MIMO-type APs has increased If you have a laptop, etc., you can use a variety of information at the same data transmission speed as wired environment. The use of this information has had a positive effect, but it is also a testbed for hackers to test another hacking technique.

In addition, hackers share information on APs that use encryption keys as well as access points that can be accessed without using network encryption keys such as WEP and WPA, and also easily crack network key values. Security risks are increasing.

In particular, in the case of hacking using a wireless LAN, the hacker moves and tries to hack, which makes it difficult to identify the hacker.

Therefore, the present invention intends to express the severity of security by visualizing the map on the security risk area by using the Geographic Infomation System (GIS).

   1. AP (Access Point) detailed data collection system

     The AP data collection system acquires GIS coordinate information using geographic information system by linking AP (Access Point) information with GPS in the field, and uses text-based data collected by using GIS system as spatial data with coordinate information. It is a system that converts and manages.

    Especially for hardware, notebooks (built-in or external wireless LAN) and USB devices that support IEEE 802.11 wireless connection.

It is configured with half GPS, and the map is displayed on the desktop PC application using the GIS engine.

Sung.

2. Integrated wireless vulnerable management system

     It integrates the location information and security setting information of the AP collected from the AP (Access Point) data collection system on the web, and displays it on the GIS so that it can be integrated and managed in the WebGIS form on the GIS server. It is used to establish a system that can collectively manage the information of IEEE 802.11 wireless network at the national level. Based on this, the security vulnerability is visualized to manage the overall security status of the WLAN based on local information. .

In addition, it can be operated as a server-based integrated system for managing wireless vulnerabilities in the vulnerable area to be used in connection with security control services for hacking attempts through the wireless network. The base for operating this system is web-based and integrates the main location information AP (Access Point) Point of Interest (POI) created using server-based WebGIS to be used as geographic information. Through this, the conversion to geographic information about hacking attempt using wired and wireless network can be made quickly, and various users can easily access and utilize it.

 In the present invention, a visualization technique using a Geographic Information System (GIS) and a Global Positioning System (GPS) technique for acquiring position information of a wireless access point (AP) are applied.

Efficient network security management is achieved by systematically managing data on security situation applied to AP (Access Point) using GIS (Geographic Information System).

In the past, WEP and WPA encryption for wireless access point (AP) were applied, and overall integrated management was weak.

Security location can be intuitively recognized by visualizing the location of each AP using a wireless LAN.

By applying Mapping technology using the Geographic Information System (GIS), the WLAN AP (Access Point) location information is displayed on the system. Visualize security risks based on Geographic Information System (GIS) to induce visualization of security vulnerable areas where many devices without wireless LAN security settings such as WEP, WPA, WPA2 are established Intuitively recognize the security management status.

GPS location information mapping information of AP (Access Point) is developed to be converted to GIS-DB. When displaying on the map, APs with WEP and WPA encryption and unencrypted APs are displayed as point information, and information on the strength of Wi-Fi connection signal is stored in a local DB to map the information to GIS-based mapping. Make this possible.

Hazardous areas are mapped to detailed administrative units (dongri) based on five legend colors, and since WarDriving places are generally moved by vehicles, basic layers are built around roads and buildings to be integrated. do.

Through this, geographic information system is used to efficiently manage areas with high security risks, enabling immediate response to security situations.

In the area of major business districts in Korea, especially in the areas of technology-based companies such as Gangnam Teheran Valley and Guro Digital Complex where IT companies are located in the information technology mecca, hackers use WarDriving to help them become an important intangible information technology company. The risk of randomly hacking them is increasing. In particular, since the subject of network management of the terminal node accessing the AP is an individual, and the hacking trend continues to increase, the government-related agencies take preventive measures in advance to enhance the security of the end nodes. The system should be used for the analysis of the wireless hacking vulnerability based on the geographic information system to pre-select the vulnerable areas of wireless hacking based on the GIS.

Through this, if it is classified as a precautionary risk area, it is classified as a priority monitoring area, and the related organization establishes a preventive inspection system that can focus on the area by linking it with the geographic information system. In addition, if the hacking attempts occurring in the area are notified immediately, a dedicated crime and information and communication security agency will be notified, and if a preventive system is established to detect hackers early, it will be possible to prevent the leakage of valuable information assets.

GIS-based preliminary security review is conducted on the predicted areas where WarDriving can occur so that valuable information assets can be protected by proactive detection of such illegal activities such as WordDriving. Various countermeasures should be provided to prevent this, and since WarDriving wireless hacking attempts move around the main road network at night and hacking is performed, crime prevention CCTVs installed in road networks operated by ward offices and illegal parking control cameras, etc. It is possible to construct an integrated prevention system in consideration of linking with existing information systems of major government agencies related to security such as local governments and National Intelligence Service, so that on-site hacking attempts and on-site evidences can be easily secured and used in connection with video information.

Claims (1)

Chapter that displays the status of wireless LAN security management to prevent GIS-based WarDriving In chi 1.Based on wireless LAN security settings such as WEP, WPA, WPA2, Security setting confirmation unit to check 2. Security establishment that visually visualizes the security setting state by security setting method Display 3. AP which is not encrypted among the security settings of the wireless LAN (Access Point) includes a storage unit that collects point information and stores it in a local DB. 4. The security setting display unit to the unencrypted AP (Access Point) GIS-based, characterized in that the point information for the visual Device that displays wireless LAN security management status to prevent WarDriving