무선 네트워크 보안 기술 - takis.co.kr

1 : . Bluetooth IT Convergence .. Zigbee .. WLAN . (IPTV, VoIP) (U-Health). Wi-Fi . (ITS, Smart Car) (CCTV).. WIBRO. Ubiquitous Society . HSDPA (QoS). IT . 2.. voice vs. data, 2003~2008 fixed vs. wireless, 2003~2008. ($ Billion) ($ Billion).. 2% . 2008 . 56%. < :IDC, 2004 >. 2009-03-30 3.. , . , , .. ( ) ( ). Security . (WLAN, WiBro, (HSDPA,HSUPA). Bluetooth,ZigBee,UWB).. (Convergence, Seamless, (IPTV,VoIP, ) Interworking Security, Mesh Network, Cross Layer). 2009-03-30 4.. War-Driving Attack . War-Driving Attack . 9 (2008).. 4100 .. : ,TJX , , , , 21, DSW . : TJ $1 3 . , $2300 . 2009-03-30 5.. War-Driving Attack . , (2008). , AP .. , .. 2009-03-30 6.. Caffe Latte Attack 6 ~10 . WEP .. WEP . 2008 San Diego toorcon 9th .. WEP .. Caff Latte with a Free Topping of . Cracked WEP. Retrieving WEP Keys From Road-Warriors - . (Toorcon 2008, San Diego ). 2009-03-30 7.. <2009 7 >.

2 ( ). IPTV VoIP .. IPTV .. IPTV (DDoS) .. VoIP .. 2009-03-30 8.. SCADA . (Mobile Web-based Supervisory Control And Data Acquisition). SCADA . Web Web-Based SCADA . , SCADA .. SCADA .. 2009-03-30 9.. , .. ( ) . < > . 2G ESN(Electronic Serial Number) . , . , . A Key' . (FMS Fraud Management System) .. 3G .. , . G1. < . >. 2009-03-30 10. (1).. UICC .. / .. ( ) . / .. CP .. / .. 2009-03-30 11. (2).. IPTV, VoIP .. / .. T-Service,Show .. Seamless .. QoS Security .. Mesh Network . Core .. 2009-03-30 12.. SKT, KTF, LGT MOU .. T .. , , , .. CEO . 2009-03-30 13.. Wireless Wide Area Network (WWAN). HSDPA Bluetooth Bluetooth IEEE WPAN. ZigBee IEEE Wireless Metropolitan Area Network (WMAN). WiBro /WiMAX Ultra WiMedia Alliance Wideband IEEE PreRSN . Wireless Local Area Network WLAN/ WEP . (WLAN) WLAN. Wi-Fi IEEE RSN(Robust Security Network). IEEE , TKIP, CCMP . Wireless Personal IEEE Area Network WiBro WMAN.

3 (WPAN) (WiMAX) PKMv1, PKMv2 . UWB. Bluetooth ZigBee HSDPA. 3 GPP TS. WWAN WCDMA, (IEEE ). ~10m ~100m ~100 Km 100~ Km GSM. 2009-03-30 14.. (2007 ~2012 ). ( : ). ( : ). < :ETRI > < :IDC, 2008 >. 2009-03-30 15. WLAN (1). WLAN . Versions Security Issue or Vulnerability Wired Equivalency Privacy(WEP) : . IEEE , . (1999) (End-to-End).. IEEE RSN(Robust Security Network). IEEE , TKIP, CCMP . (2004) . 2009-03-30 16. WEP . WEP . IEEE : . IV : 24bits .. WEP . : 19 . , IV 12,430 . 10 . RC4 : .. IV : seed .. Shared-key : .. CRC-32 : . 2009-03-30 17. WEP . WEP . (Brute Force Attack). : 5,000 .. : . FMS (Fluhrer,Mantin,Shamir Attack). KoreK .. WEP . AirSnort, AirCrack, WebLab WEP-104 WEP Crack 60 .. 2009-03-30 18. WEP . WEP Crack Test WEP (Difficult) : E38449EC5A (40bit). WEP (Simple) : 0000000000 (40bit). WEP (Difficult) : 707BB2E8E0 ADF0658584B7B8AE (104bit). WEP (Simple) : 00000000000000000000000000 (104bit).

4 WEP (Difficult) WEP (Simple). WEP Key IVs 40bit 104bit 40bit 104bit 0~100000 X X X X. 100000~200000 X X 160422 X. 200000~300000 282760 X O 200165. 300000~400000 O 310056 O O. 400000~500000 O O O O. IVs Crack WEP key . (WEP Key 1 ). 2009-03-30 19. WLAN (2). WPA (Wi-Fi Protection Access). IEEE TGi , Wi-Fi . Versions Security Issue or Vulnerability IEEE Draft . WPA Dynamic WEP. (2003) TKIP(Temporal Key Integrity Protocol). - WEP . IEEE . WPA2. , CCMP . (2004). - AES-CCM . 2009-03-30 20. WLAN . WLAN . / AP, AP, AP . AP Ad-Hoc .. SSID . SSID . WPA (WEP . ) Quality of Service(QoS) .. DHCP . IP .. Motorola AirDefense Retail Shopping Wireless Security Survey in EMB. November. 15, 2007 January. 28, 2009. ,2009 . mis-configure (22%), default SSID (4%) . 2009-03-30 22. ( ).. WPA WPA2 .. (AP) .. DoS . ( , , .. 35 ) .. 2009-03-30 23. , LAN ( ). <2009 IT >(09. 2). LAN . 1. LAN ( , ).

5 , .. 2. LAN . , (WPA2 ), .. 2009-03-30 24. PCI DSS ( ). Payment Card Industry Data Security Standard ( IT ). Wireless LAN ( ) .. , . 1. POS(Point of Sale) .. 2.. Wireless Analyzer WIDS( ) . 2009-03-30 25. PCI DSS ( ). Payment Card Industry Data Security Standard PCI DSS (2008 Wardriving Attack ). IEEE .. 1. WEP(Wired Equivalent Privacy).. 2. 2010 6 30 WEP . WPA(Wi-Fi Protected Access) . 2009-03-30 26. : .. , 2009. 1. 20 . 2008 5 , .. / / .. 2009-03-30 27. : .. : IEEE , WPA/WPA2.. , (WNIPS), (WIDS) .. / . / .. 2009-03-30 28. : .. (Zigbee, BlueTooth, WLAN, Wi-Fi, Wibro, HSDPA). IT .. (Wireless Web, Mobile Multimedia) - . - .. - . / - . (Smart Phone, PDA).. / . (Mobile Forensics, Wireless Forensics). - u-City - u-Home . (Wireless Privacy Enhancing Technology). IT U- .. IT .. 29. 2009-03-30 30.