Detecting rogue access points using client-side bottleneck bandwidth analysis

Computers and Security

Volumn 28, Issue 3-4, 2009, Pages 144-152

  Kao, Kuo Fong ^a   Liao, I En ^b   Li, Yueh Chia ^b  

^a HSIUPING INSTITUTE OF TECHNOLOGY   (Taiwan)

^b NATIONAL CHUNG HSING UNIVERSITY   (Taiwan)

Author keywords

AP detection; Packet analysis; Packet pair; Rogue AP; Security

Indexed keywords

FREQUENCY ALLOCATION; INTERNET; MANAGERS; PACKET NETWORKS; SENSOR NETWORKS; SENSORS; TELECOMMUNICATION SYSTEMS;

AP DETECTION; PACKET ANALYSIS; PACKET PAIR; ROGUE AP; SECURITY;

NETWORK SECURITY;

EID: 63049132386     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2008.11.005     Document Type: Article

References (41)

1. Adya A., Bahl P., Chandra R., and Qiu L. Architecture and techniques for diagnosing faults in IEEE 802.11 infrastructure networks. MobiCom '04: proceedings of the 10th annual international conference on Mobile computing and networking (2004), ACM, New York, NY, USA
2. AirDefense. Wireless LAN security. http://airdefense.net
3. AirMagnet. AirMagnet distributed system. http://airmagnet.com
4. AirWave. AirWave management platform. http://airwave.com
5. Bahl P., Chandra R., Padhye J., Ravindranath L., Singh M., Wolman A., et al. Enhancing the security of corporate Wi-Fi networks using DAIR. MobiSys '06: proceedings of the 4th international conference on Mobile systems, applications and services (2006), ACM, New York, NY, USA
6. Baiamonte V., Papagiannaki K., and Iannaccone G. Detecting 802.11 wireless hosts from remote passive observations. In: Akyildiz I.F., Sivakumar R., Ekici E., de Oliveira J.C., and McNair J. (Eds). Networking, vol. 4479 of lecture notes in computer science (2007), Springer
7. Balachandran A., Voelker G.M., Bahl P., and Rangan P.V. Characterizing user behavior and network performance in a public wireless LAN. SIGMETRICS '02: proceedings of the 2002 ACM SIGMETRICS international conference on measurement and modeling of computer systems (2002), ACM Press, New York, NY, USA
8. Beyah R, Kangude S, Yu G, Strickland B, Copeland J. Rogue access point detection using temporal traffic characteristics. In: IEEE GLOBECOM 2004, 2004.
9. Bhagyavati, Summers W.C., and DeJoie A. Wireless security techniques: an overview. InfoSecCD '04: proceedings of the 1st annual conference on information security curriculum development (2004), ACM Press, New York, NY, USA
10. Bolot J.-C. End-to-end packet delay and loss behavior in the internet. SIGCOMM '93: conference proceedings on Communications architectures, protocols and applications (1993), ACM Press, New York, NY, USA
11. Capone A, Fratta L, Martignon F. Bandwidth estimation schemes for TCP over wireless networks, IEEE Transactions on Mobile Computing 3.
12. Carter R.L., and Crovella M.E. Measuring bottleneck link speed in packet-switched networks. Perform Eval 27-28 (1996) 297-318
13. Cisco. CiscoWorks wireless LAN solution engine. http://cisco.com
14. In: Dasarathy B.V. (Ed). Nearest neighbor (NN) norms: NN pattern classification techniques (1991), IEEE Computer Society Press, Los Alamitos, CA
15. Dovrolis C, Prasad R, Murray M, Claffy K. Bandwidth estimation: metrics, measurement techniques, and tools, Network, IEEE 17.
16. Dovrolis C., Ramanathan P., and Moore D. What do packet dispersion techniques measure? (2001), INFOCOM
17. Duda R.O., Hart P.E., and Stork D.G. Pattern classification. 2nd ed. (2000), Wiley-Interscience
18. HighHall. WLAN monitoring, intrusion prevention and rogue detection. http://www.highwalltech.com/
19. Karygiannis T, Owens L. Wireless network security: 802.11, bluetooth and handheld devices, special publication of National Institute of Standards and Technology. vol. 800(48) 2002, 20-23.
20. Keshav S. A control-theoretic approach to flow control. SIGCOMM'91: Proceedings of the conference on communications architecture & protocols (1991), ACM Press, New York, NY, USA
21. Lai K, Baker M. Nettimer: a tool for measuring bottleneck link bandwidth. In: USENIX symposium on internet technologies and systems, 2001.
22. Lei J., Fu X., Hogrefe D., and Tan J. Comparative studies on authentication and key exchange methods for 802.11 wireless LAN. Comput Secur 26 5 (2007) 401-409
23. Li Y.-C. Rogue access point detection based on support vector machines (2006), Master Thesis of National Chung Hsing University, Taiwan
24. Li Y-C, Kao K-F, Liao I-E. Rogue access point detection based on support vector machines. In: The 12th mobile computing workshop, 2006.
25. Liao I-E, Kao K-F, Wu H-C. A rogue access point detection system based on packet analysis for campus network. In: 4TH international conference on computer science and infomration systems, 2008.
26. Ling C.-C. Detection of unlawful wireless access point based on network packet analysis (2005), Master Thesis of National Chung Hsing University, Taiwan
27. Ling C-C, Kao K-F, Liao I-E. Detection of unlawful wireless access point based on network packet analysis. In: Workshop on wireless, ad hoc, and sensor networks, 2005.
28. Mano C.D., Blaich A., Liao Q., Jiang Y., Cieslak D.A., Salyers D.C., et al. Inf Syst Secur 11 2 (2008) 1-23
29. NetStumbler. http://www.netstumbler.com
30. Raudys S. Statistical and neural classifiers - an integrated approach to design (2001), Springer
31. Rodrig M., Reis C., Mahajan R., Wetherall D., and Zahorjan J. Measurement-based characterization of 802.11 in a hotspot setting. E-WIND '05: proceeding of the 2005 ACM SIGCOMM workshop on experimental approaches to wireless network design and analysis (2005), ACM Press, New York, NY, USA
32. In: Shakhnarovich G., Darrell T., and Indyk P. (Eds). Nearest-neighbor methods in learning and vision (2006), MIT Press, Cambridge, MA
33. Strauss J., Katabi D., and Kaashoek F. A measurement study of available bandwidth estimation tools. IMC '03: proceedings of the 3rd ACM SIGCOMM conference on Internet measurement (2003), ACM Press, New York, NY, USA
34. Theodoridis S., and Koutroumbas K. Pattern recognition. 3rd ed. (2006), Academic Press
35. Vapnik V., Golowich S.E., and Smola A. Support vector method for function approximation, regression estimation, and signal processing. Advances in neural information processing systems 9 (1997), MIT Press
36. Wavelink. Rogue access point dection. http://www.proxim.com/learn/library/whitepapers
37. Wei W, Jaiswal S, Kurose J, Towsley D. Identifying 802.11 traffic from passive measurements using iterative bayesian inference, INFOCOM 2006. In: 25th IEEE international conference on computer communications. proceedings. 2006. pp. 1-12.
38. Wei W., Suh K., Wang B., Gu Y., Kurose J., and Towsley D. Passive online rogue access point detection using sequential hypothesis testing with tcp ack-pairs, in: IMC '07. Proceedings of the 7th ACM SIGCOMM conference on Internet measurement (2007), ACM, New York, NY, USA
39. Wei W., Wang B., Zhang C., Kurose J., and Towsley D. Classification of access network types: ethernet wireless LAN, ADSL, cable modem or dialup? INFOCOM 2005. 24th Annual Joint Conference of the IEEE Computer and Communications Societies. Proceedings IEEE 2 (2005) 1060-1071
40. WiSentry. http://www.wimetrics.com/Products/WAPD.htm
41. Zahur Y., and Yang T.A. Wireless LAN security and laboratory designs. J Comput Small Coll 19 3 (2004) 44-60