On fast and accurate detection of unauthorized wireless access points using clock skews

Proceedings of the Annual International Conference on Mobile Computing and Networking, MOBICOM

Volumn , Issue , 2008, Pages 104-115

  Jana, Suman ^a   Kasera, Sneha Kumar ^a  

^a Department of Electrical and Computer Engineering   (United States)

Author keywords

Fake access point; Fingerprint; IEEE 802.11; MAC address spoofing; Timestamp

Indexed keywords

FAKE ACCESS POINT; FINGERPRINT; IEEE 802.11; MAC ADDRESS SPOOFING; TIMESTAMP;

CLOCKS; CURVE FITTING; ELECTRIC CLOCKS; FREQUENCY ALLOCATION; HEURISTIC METHODS; LINEARIZATION; LOCAL AREA NETWORKS; MEDIUM ACCESS CONTROL; MOBILE COMPUTING; SEQUENTIAL CIRCUITS; STANDARDS; TELECOMMUNICATION TRAFFIC; WIRELESS LOCAL AREA NETWORKS (WLAN); WIRELESS TELECOMMUNICATION SYSTEMS;

ACCESS CONTROL;

EID: 60349083720     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1409944.1409958     Document Type: Conference Paper

References (32)

1. IEEE Standard 802.11 - wireless LAN medium access control (MAC) and physical layer (PHY) specifications. The Institute of Electrical and Electronics Engineers, Inc., 1999.
2. AirDefense, wireless Ian security, http://airdefense.net.
3. AirWave management platform, http://airwave.com.
4. Intel PRD/Wireless 3945ABG Driver for Linux, http://ipw3945.sourceforge. net/.
5. MadWifi- multiband atheros driver for WiFi, http://madwifi.org/.
6. Raw Fake AP, http://rfakeaip.tuxfamily.org/.
7. Raw Glue AP, http://rfakeap.tuxfamily.org/.
8. AirMagnet, http://www.airmagnet.com.
9. Broadcom Product Brief BCM-5354, http://www.broadcom.com/collateral/pb/ 5354-PB01-R.pdf.
10. Cisco wireless LAN solution engine(WLSE), http://www.cisco.com.
11. DD-WRT, http://www.dd-wrt.com.
12. Network Time Protocol version 4 reference and implementation guide, http://www.eecis.udel.edu/emills/database/reports/ntp4/ntp4.pdf.
13. Linux kernel source code, http://www.kernel.org/.
14. NetStumbler, http://www.netstumbler.com.
15. Rogue access point detection: Automatically detect and manage wireless threats to your network, http://www.proxim.com.
16. tcpdump, http://www.tcpdump.org/.
17. A. Adya, P. Bahl, and R. C. et al. Architecture and techniques for diagnosing faults in IEEE 802.11 infrastructure networks. In MobiCom '04, pages 30-44, 2004.
18. P. Bahl, R. Chandra, and J. P. et al. Enhancing the security of corporate Wi-Fi networks using DAIR. In MobiSys '06, pages 1-14, 2006.
19. D. H. Ballard. Generalizing the hough transform to detect arbitrary shapes. Readings in computer vision: issues, problems, principles, and paradigms, pages 714-725, 1987.
20. R. Beyah, S. Kangude, and G. Y. et al. Rogue access point detection using temporal traffic characteristics. In Proceedings of IEEE GLOBECOM, December 2004.
21. A. P. Dempster, N. M. Laird, and D. B. Rubin. Maximum likelihood from incomplete data via the EM algorithm. Journal of the Royal Statistical Society, 39(1):1-38, 1977.
22. J. Franklin, D. McCoy, P. Tabriz, V. Neagoe, J. V. Randwyk, and D. Sicker. Passive data link layer 802.11 wireless device driver fingerprinting. In USENIX-SS'06: Proceedings of the 15th conference on USENIX Security Symposium, pages 12-12, Berkeley, CA, USA, 2006. USENIX Association.
23. C. He and J. C. Mitchell. Security analysis and improvements for IEEE 802.Hi. In NDSS, 2005.
24. P. Hough. Method and means for recognizing complex patterns. U.S. Patent 3069654, 1962.
25. T. Kohno, A. Broido, and K. C. Claffy. Remote physical device fingerprinting. IEEE Trans. Dependable Secur. Comput, 2(2):93-108, 2005.
26. C. Mano, A. Blaich, and Q. L. et al. Ripps: Rogue identifying packet payload sheer detecting unauthorized wireless hosts through network traffic conditioning. A CM Transactions on Information and System Security, 2007.
27. S. B. Moon, P. Skelly, and D. Towsley. Estimation and removal of clock skew from network delay measurements. Technical report, Amherst, MA, USA, 1998.
28. S. J. Murdoch. Hot or not: revealing hidden services by their clock skew. In CCS '06, pages 27-36, New York, NY, USA, 2006. ACM.
29. A. Pásztor and D. Veitch. PC based precision timing without GPS. SIGMETRICS Perform. Eval. Rev., 30(1):1-10, 2002.
30. M. Rodrig, C. Reis, and R. M. et al. CRAWDAD data set uw/sigcomm2004 (v. 2006-10-17). http://crawdad.cs.dartmouth.edu/uw/sigcomm2004, Oct. 2006.
31. W. Wei, K. Suh, and B. W. et al. Passive online rogue access point detection using sequential hypothesis testing with TCP ACK-pairs. In IMC, pages 93-108, 2007.
32. L. Xu and E. Oja. Randomized Hough transform (RHT): basic mechanisms, algorithms, and computational complexities. CVGIP: Image Underst., 57(2):131-154, 1993.