A Hybrid Rogue Access Point Protection Framework for Commodity Wi-Fi Networks

—We develop a practical and comprehensive hybrid rogue access point (AP) detection framework for commodity WiFi networks. It is the first scheme that combines the distributed wireless media surveillance and the centralized wired end socket level traffic “fingerprinting.” The former is designed not only to detect various types of rogue APs, but also to discover suspicious activities so as to prevent the adversaries from turning victim APs into rogue devices. Moreover, the socket level traffic fingerprinting helps our frame work to achieve a finer granularity on rogue AP detection among the existing schemes. This framework has the following nice properties: i) it requires neither specialized hardware nor modification to existing standards; ii) the proposed mechanism greatly improves the rogue AP detection probability so that network resilience is improved; iii) it provides a cost-effective solution to Wi-Fi network security enhancement by incorporating free but mature softwa...

• Type: Conference
• Year: 2008
• Where: INFOCOM
• Authors: Liran Ma, Amin Y. Teymorian, Xiuzhen Cheng
• Keywords: Communications, Hybrid Rogue, INFOCOM 2008, Rogue Ap, Rogue Ap Detection