李伟渊 何伟贤 谭彬

摘 要：移动化已经支撑起企业运行的各个方面，关键业务从有线网络转移到无线网络，不但赢得了时间，还数倍提升了运转效率。然而，在无线网络正逐渐成为无线办公系统主要基础架构的同时，无线WiFi的安全风险却正与日俱增，人们对无线WiFi网络安全担忧加剧。论文简要介绍了无线安全监测及防护系统建设思路。从海量无线安全攻防对抗中，抽取无线安全监测、管理、射频阻断、引流防护等技术，构筑无线安全防护屏障，为无线WiFi系统提供可靠、持续的环境监测，对非法无线攻击行为实施有效检测，对危害性高、具备流行趋势的无线安全事件进行智能化反制，最终实现WLAN系统的全面安全保障。

关键词：无线安全；射频阻断；无线WiFi防护

中图分类号：TP309 文献标识码：D

Abstract： Mobile has supported all aspects of enterprise operation， the key business from wired networks to wireless networks， not only won time， but also several times to improve operational efficiency. However， while WLAN is gradually becoming the main infrastructure of IT systems， the security risks of WLAN are increasing day by day， and people are increasingly worried about WLAN network security. This paper briefly introduces the construction of wireless security monitoring and protection system. From the massive wireless security attack and defense countermeasure， the wireless security monitoring， management， radio frequency blocking， drainage protection and other technologies are extracted to construct the wireless security protection barrier， provide reliable and continuous environmental monitoring for WLAN system， carry out effective detection of illegal wireless attacks， and have high harmfulness and popular trend of wireless security. The incident is intelligently counteracted， so that the overall security of the WLAN system will eventually be realized.

Key words： wireless security；radiofrequency blocking；wifi protect

1 引言

近年来，央视3.15晚会先后曝光了欺诈、钓鱼Wifi和Wifi暴力破解等无线网络环境安全性问题。与此同时，智能手机、平板电脑等智能终端普及迅速，员工私自搭建无线路由器或软AP连接到企业内网的现象也日益泛滥，只通过安全管理要求，并不能有效控制。这些私自接到内网的AP，躲避了有線链路的监测，而且大部分直接使用默认密码、弱口令甚至没有密码，这就相当于开了无数个大门，让外部人员可以轻易访问企业内网。同时，企业的内部员工恶意通过移动的热点、WiFi 或Ad-hoc、直接链接等手段就很容易将内部信息泄露出去。这些违规行为，在传统的有线网络安全防护体系中是没有记录的，更无法稽核，这使得企业办公环境中的无线网络安全形势日益严峻。……