802.1x port authentication defects and its improvement

Wan Bingwen; Gan Haihui; Dong Ximing

doi:10.13756/j.gtxyj.2015.01.008

您当前的位置：

首页 >

文章列表页 >

802.1x port authentication defects and its improvement

- 802.1x port authentication defects and its improvement
- Study on Optical communication Issue 1, Pages: 23-25(2015)
- 作者机构：
  
  1. 武汉邮电科学研究院
  2. 武汉烽火网络有限责任公司
- 作者简介：
- 基金信息：
- DOI：10.13756/j.gtxyj.2015.01.008
  CLC： TP393.08
- Published：2015，
扫描看全文
[1]万冰雯,甘海慧,董喜明.802.1x端口认证缺陷及其改进[J].光通信研究,2015(01):23-25+78.

Wan Bingwen, Gan Haihui, Dong Ximing. 802.1x port authentication defects and its improvement. [J]. (1):23-25(2015)
[1]万冰雯,甘海慧,董喜明.802.1x端口认证缺陷及其改进[J].光通信研究,2015(01):23-25+78. DOI： 10.13756/j.gtxyj.2015.01.008.

Wan Bingwen, Gan Haihui, Dong Ximing. 802.1x port authentication defects and its improvement. [J]. (1):23-25(2015) DOI： 10.13756/j.gtxyj.2015.01.008.

摘要

在网络安全接入技术中

基于IEEE 802.1x协议的认证方法相对于其他认证技术来说有着较大的优势

但在实际运用中仍存在一些不足。文章简要分析了IEEE 802.1x协议的安全性

对存在的安全缺陷进行了分析并提出改进流程及解决办法

通过改进协议包报文中的Type-Data域

有效地避免了中间人攻击以及DoS（拒绝服务）攻击。实验结果表明

虽然改进协议会导致交换机CPU（中央处理器）利用率小幅升高

但在大量报文攻击时仍能达到高达86.3%的过滤率并能有效避免攻击。

Abstract

In access technologies for network security

the IEEE 802.1xprotocol-based authentication method is much superior to other authentication technologies

but it still has some deficiencies in practice.This paper briefly describes the protocol security

analyzes the existing security defects and presents an improvement process and solutions.It effectively avoids the middleman attack and Denial of Service（DoS）attack by improving the Type-Data domain in the messages in the protocol packets.The results show that although the improved protocol may lead to slight increase of the switch CPU utilization rate

it still can reach the filtration rate of as high as 86.3%in large numbers of message attacks.

关键词

802.1x协议中间人攻击DoS攻击认证网络安全

Keywords

IEEE 802.1xprotocolmiddle-man attackDoS attackauthenticationnetwork security

references

更多指标>

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

RADIUS client timeout-processing optimization in WLAN

Research on unified security identity authentication based on campus networks

Design and realization of an improved HTTP digest authentication scheme

Related Author

No data

Related Institution

Wuhan Hongxin Communication Technologies Co.,Ltd.

Modern Education and Technology Center,Henan Polytechnic University

Jiaozuo University

College of Electronics and Information Engineering,SCUFN

⁰