NFT를 이용한 4-방향 핸드셰이크의키 교환이 없는 실용적인 WPA2
N-WPA2: Practical WPA2 Without Key Exchange of 4-way Handshake Using NFT Authentication
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
다가오는 미래에는 인터넷을 사용하는 사람이라면 누구나 NFT를 1개 이상 가지게 될 것이다. NFT는 FT와는 다르게 소유자를 명시할 수 있고,FT에 비해 추적관리도 용이하다. 2022년의 조사에서도 현재까지 전 세계적으로 가장 많이 사용되고 있는 무선 프로토콜은 WPA2이다. 2006년에나온 프로토콜인 만큼 현시점에서는 다양한 취약점이 존재하는 프로토콜이다. 취약점을 보완하기 위해 2018년에 새로 나온 WPA3나 기존의 WPA2를강화한 WPA2-EAP를 사용하기 위해선 접속하는 기기인 STA(스테이션)과 AP(액세스포인트, 공유기)에 추가적인 장비 업그레이드가 필요하다. 고가의라우터 장비를 사용하면 보안적인 부분은 해결되지만 SOHO(Small Office Home Office)에서 도입하기엔 경제적인 비효율성이 있다. 본 논문에서는NFT를 인증 수단으로 사용하여 기존의 WPA2를 그대로 사용하고 장비적인 업그레이드를 하지 않으면서 현재까지 널리 사용되고 있는 크랙 툴들을방어하며 기존 WPA2와 비교해서도 실제로 SOHO에서 사용하는데 무리가 없음을 보였다.
Abstract
In the coming future, anyone using the Internet will have more than one NFT. Unlike FT, NFT can specify the owner, and trackingmanagement is easier than FT. Even in the 2022 survey, WPA2 is the most widely used wireless protocol worldwide to date. As it isa protocol that came out in 2006, it is a protocol with various vulnerabilities at this time. In order to use WPA2-EAP or WPA3 (2018),which were released to compensate for the vulnerabilities of WPA2, additional equipment upgrades are required for STA (station) andAP (access point, router), which are connected devices. The use of expensive router equipment solves the security part, but it iseconomically inefficient to be introduced in Small Office Home Office (SOHO). This paper uses NFT as a means of authentication anduses the existing WPA2 as it is without equipment upgrade, defend crack tools of WPA2 that have been widely used so far and comparedto the existing WPA2, it was shown that it was not difficult to actually use them in SOHO.
참고문헌 (14)
- D. J. Fehér, "Effects of the WPA2 KRACK attack in real environment", IEEE 16th International Symposium on Intelligent Systems and Informatics(SISY) (2018)
- V. O. Etta, "Assessment and Test-case Study of Wi-Fi Security through the Wardriving Technique", Article in Mobile Information Systems (2022)
- T. Eun, "Introduction to attack methods of locally accessible private blockchain", Korea Computer Congress 2022(KCC 2023), pp.1276~1278 (2022)
- "Bitcoin: A peer-to-peer electronic cash system" (2008)[URL]
- "A next generation smart contract & decentralized application platform" (2013)[URL]
- E. Baray, "WLAN security protocols and WPA3 security approach measurement through aircrack-ng technique", International Conference on Computing Methodologies and Communication (ICCMC) (2021)
- L. G. Nikolov, "Wireless network vulnerabilities estimation", Security & Future, 2(2), pp.80~82 (2018)
- C. D. Omorog, "The performance of blum-blum-shub elliptic curve pseudorandom number generator as WiFi protected access 2 security key generator", Proceedings of the 2nd International Conference on Business and Information Management (ICBIM) (2018)
- J. Guo, "A secure session key negotiation scheme in WPA2-PSK networks", IEEE Wireless Communications and Networking Conference(WCNC) (2020)
- V. L. L. Thing, "IEEE 802.11 network anomaly detection and attack classification: A deep learning approach" (2017), IEEE Wireless Communications and Networking Conference (WCNC)
- U. Chatterjee, "Stupify : A hardware countermeasure of KRACKs in WPA2 using physically unclonable functions", Companion Proceedings of the Web Conference 2020 (2020)
- Y. Niu, "An anonymous and accountable authentication scheme for Wi-Fi hotspot access with the Bitcoin blockchain", IEEE, 2017, ~
- "WPA3 AND ENHANCED OPEN: NEXT GENERATION WI-FI SECURITY" (2018)[URL]
- "Decentralized Society: Finding Web3's Soul" (2022)[URL]