On fast and accurate detection of unauthorized wireless access points using clock skews

IEEE Transactions on Mobile Computing

Volumn 9, Issue 3, 2010, Pages 449-462

  Jana, Suman ^a   Kasera, Sneha K ^a  

^a Department of Electrical and Computer Engineering   (United States)

Author keywords

Fake access point; Fingerprint; IEEE 802.11; MAC address spoofing; Time stamp

Indexed keywords

ACCESS POINTS; CLOCK SKEWS; CLOCK SOURCE; EXTERNAL FACTORS; IEEE 802.11 MAC; IEEE 802.11S; LEAST SQUARES; MEASUREMENT DATA; ROBUST METHODS; TEMPERATURE VARIATION; TIME STAMPS; TIME SYNCHRONIZATION; VIRTUALIZATIONS; WIRELESS ACCESS POINTS; WIRELESS LOCAL AREA NETWORK ACCESS POINT;

ELECTRIC CLOCKS; HEURISTIC METHODS; LINEARIZATION; LOCAL AREA NETWORKS; SEQUENTIAL CIRCUITS; STANDARDS; TELECOMMUNICATION TRAFFIC; WIRELESS LOCAL AREA NETWORKS (WLAN); WIRELESS TELECOMMUNICATION SYSTEMS;

MEDIUM ACCESS CONTROL;

EID: 75449107600     PISSN: 15361233     EISSN: None     Source Type: Journal    
DOI: 10.1109/TMC.2009.145     Document Type: Article

References (34)

1. AirDefense, Wireless Lan Security," http://airdefense.net (2009)
2. AirWave Management Platform," http://airwave.com (2009)
3. Cisco Wireless LAN Solution Engine (WLSE)," http://www.cisco.com (2009).
4. Rogue Access Point Detection: Automatically Detect and Manage Wireless Threats to Your Network," http://www.proxim.com (2009)
5. Raw Glue AP," http://rfakeap.tuxfamily.org (2009).
6. C. He and J.C. Mitchell, "Security Analysis and Improvements for IEEE 802.11i," Proc. Ann. Network and Distributed System Security Symp. (NDSS), 2005.
7. AirMagnet," http://www.airmagnet.com (2009).
8. NetStumbler," http://www.netstumbler.com 2009.
9. T. Kohno, A. Broido, and K.C. Claffy, "Remote Physical Device Fingerprinting," IEEE Trans. Dependable Secure Computing, vol.2, no.2, pp. 93-108, Apr.-June 2005. (Pubitemid 41259859)
10. S.J. Murdoch, "Hot or Not: Revealing Hidden Services by Their Clock Skew," Proc. Conf. Computer and Comm. Security (CCS '06), pp. 27-36, 2006.
11. S.B. Moon, P. Skelly, and D. Towsley, "Estimation and Removal of Clock Skew from Network Delay Measurements," technical report, Univ. of Massachusetts at Amherst, 1998.
12. IEEE Standard 802.11-Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications, The Institute of Electrical and Electronics Engineers, Inc., 1999.
13. IEEE Guide for Measurement of Environmental Sensitivities of Standard Frequency Generators, IEEE Standards Coordinating Committee 27-SCC27-on Time and Frequency, 1995.
14. P. Hough, Method and Means for Recognizing Complex Patterns, US Patent 3069654, 1962.
15. D.H. Ballard, "Generalizing the Hough Transform to Detect Arbitrary Shapes," Readings in Computer Vision: Issues, Problems, Principles, and Paradigms, pp. 714-725, Morgan Kaufmann, 1987.
16. L. Xu and E. Oja, "Randomized Hough Transform (RHT): Basic Mechanisms, Algorithms, and Computational Complexities," CVGIP: Image Understanding, vol.57, no.2, pp. 131-154, 1993.
17. A.P. Dempster, N.M. Laird, and D.B. Rubin, "Maximum Likelihood from Incomplete Data via the EM Algorithm," J. Royal Statistical Soc., vol.39, no.1, pp. 1-38, 1977.
18. tcpdump," http://www.tcpdump.org/(2009).
19. MadWifi-Multiband Atheros Driver for WiFi," http://madwifi.org 2009.
20. Intel PRO/Wireless 3945abg Driver for Linux," http://ipw3945. sourceforge.net (2009).
21. Linux Kernel Source Code," http://www.kernel.org (2009)
22. M. Rodrig, C. Reis, R. Mahajan, D. Wetherall, J. Zahorjan, and E. Lazowska, "CRAWDAD Dataset of Wireless Network Measurement," Proc. SIGCOMM '04, Oct. 2006.
23. DD-WRT," http://www.dd-wrt.com (2009).
24. A. Pásztor and D. Veitch, "PC Based Precision Timing without GPS," SIGMETRICS Performance Evaluation Rev., vol.30, no.1, pp. 1-10, 2002.
25. Network Time Protocol Version 4 Reference and Implementation Guide," http://www.eecis.udel.edu/emills/database/reports/ntp4/ntp4.pdf (2009).
26. D. Bovet and M. Cesati, Understanding the Linux Kernel, third ed. O'Reilly Media, Inc., Nov. 2005.
27. P. Bahl et al., "Enhancing the Security of Corporate Wi-Fi Networks Using DAIR," Proc. MobiSys, pp. 1-14, 2006.
28. Raw Fake AP," http://rfakeap.tuxfamily.org (2009)
29. Broadcom Product Brief BCM-5354," http://www.broadcom.com/ collateral/pb/5354-PB01-R.pdf 2009.
30. A. Adya et al., "Architecture and Techniques for Diagnosing Faults in IEEE 802.11 Infrastructure Networks," Proc. ACM MobiCom, pp. 30-44, 2004.
31. R. Beyah et al., "Rogue Access Point Detection Using Temporal Traffic Characteristics," Proc. IEEE Global Telecomm. Conf. (GLOBECOM), Dec. 2004.
32. C. Mano et al., "Ripps: Rogue Identifying Packet Payload Slicer Detecting Unauthorized Wireless Hosts through Network Traffic Conditioning," ACM Trans. Information and System Security, vol.11, no.2, 2007.
33. W. Wei et al., "Passive Online Rogue Access Point Detection Using Sequential Hypothesis Testing with TCP ACK-Pairs," Proc. Internet Measurement Conf. (IMC), pp. 93-108, 2007.
34. J. Franklin, D. McCoy, P. Tabriz, V. Neagoe, J.V. Randwyk, and D. Sicker, "Passive Data Link Layer 802.11 Wireless Device Driver Fingerprinting," Proc. 15th Conf. USENIX Security Symp. (USENIX-SS '06), pp. 12-12, 2006.