Security analysis and attack feasibility study on WPA3-SAE
Shen Haixia, Li Han, Zhao Fei, Cao Tieyong
School of Command and Control Engineering， Army Engineering University of PLA
Abstract： In this paper, we firstly analyzed the basic principle and detailed process of WPA3-SAE, then studied its security through theoretical analysis and practical verification respectively. Furthermore, we analyzed and verified the potential security risks, vulnerabilities and possible attack methods during its practical application. Experimental results show that WPA3-SAE can resist denial of service attacks based on management frames, such as De-authentication attack and Disassociation attack. Also, it can defend against offline dictionary attacks. It improves the security of Wi-Fi networks effectively. However, it also has security loopholes in practical applications, which make it possible for attackers to carry out downgrade attacks, side channel attacks, cache attacks and brute force password cracking attacks.
