OCHIQ WI-FI TARMOQLAR XAVFSIZLIGI
Kalit so‘zlar:
Wireless Access Protocol, Wi-Fi, WPA1, WPA2, WPA3, Soxta tarmoq, Password Cracking, Eavesdropping, Evil twin attack, Opportunistic Wireless Encryption, Simultaneous Authentication of Equals.Annotatsiya
Ochiq WiFi tarmoqlari keng qo‘llanilayotgan bir paytda, bunday
tarmoqlarni himoyalash muhim ahamiyat kasb etadi. Ushbu maqolada ochiq simsiz tarmoqlar va
ularning xavfsizligi tahlil etilgan. Yangi Wireless Access Protocol — WPA3 joriy etilishi bilan ochiq
tarmoqlarning xavfsizligi sezilarli darajada yaxshilandi. Biroq, evil twin (soxta tarmoq)
hujumlariga qarshi kurashishda WPA3 protokolida hech qanday o‘zgarishlar kiritilmagan, shu
sababli bu turdagi hujumlar hanuzgacha mumkin bo‘lgan xavf turlaridan biri hisoblanadi.
Maqolada WPA3 dagi yangi texnikalar va protokollar tahlil qilingan. Shuningdek, evil twin
hujumlariga qarshi foydalanuvchini himoya qilishning bir nechta yondashuvlari taklif etilgan.
Tanlangan mezonlar asosida eng yaxshi deb topilgan yondashuv — “birinchi foydalanishda
ishonch” (trust on first use) usuli tanlab olinib, uni qanday qo‘llash bo‘yicha tavsiyalar keltirilgan.
Manbalar
Wi-Fi Alliance. Certification. – 2019. https://www.wi-fi.org/certification
de Ruiter J. Advanced Network Security: WiFi Security. – 2018. – Lecture slides, Master Course Advanced Network Security, Master Cyber Security.
Bahl P., Chandra R., Padhye J., Ravindranath L., Singh M., Wolman A., Zill B. Enhancing the Security of Corporate Wi-Fi Networks Using DAIR // Proceedings of the 4th International Conference on Mobile Systems, Applications and Services. – ACM, 2006. – P. 1–14.
Boeyen S., Santesson S., Polk T., Housley R., Farrell S., Cooper D. Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile. – RFC 5280, 2008. DOI: 10.17487/RFC5280. https://rfc-editor.org/rfc/rfc5280.txt
Cam-Winget N., Housley R., Wagner D., Walker J. Security Flaws in 802.11 Data Link Protocols // Communications of the ACM. – 2003. – Vol. 46, No. 5. – P. 35–39.
CheapSSLsecurity. What Is SSL/TLS Handshake? Understand the Process in Just 3 Minutes. – 2019. https://cheapsslsecurity.com/blog/what-is-ssl-tlshandshake-understand-the-process-in-just-3-minutes/