Who is peeping at your passwords at starbucks? - To catch an evil twin access point

Proceedings of the International Conference on Dependable Systems and Networks

Volumn , Issue , 2010, Pages 323-332

  Song, Yimin ^a   Yang, Chao ^a   Gu, Guofei ^a  

^a TEXAS A AND M UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

802.11G; ACCESS POINTS; ANOMALY-DETECTION ALGORITHMS; COMMUNICATION STRUCTURES; DETECTION METHODS; DETECTION TECHNIQUE; EFFECTIVE SOLUTION; FALSE POSITIVE RATES; HIGH DETECTION RATE; INTERNET ACCESS; NETWORK ADMINISTRATOR; NETWORK PROVIDER; PHISHING; REAL-WORLD; STARBUCKS; TRAINING DATA; WIRELESS CLIENT; WIRELESS COMMUNICATIONS;

AIRPORT SECURITY; LOCAL AREA NETWORKS; WIRELESS TELECOMMUNICATION SYSTEMS;

WIRELESS LOCAL AREA NETWORKS (WLAN);

EID: 77956604585     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DSN.2010.5544302     Document Type: Conference Paper

References (35)

1. Cisco Wireless LAN Solution Engine (WLSE). White paper, http://www.cisco.com/en/US/products/sw/cscoworkips3915/.
2. Received Signal Strength Indication. http://en.wikipedia.org/wiki/ Received-signal-strength-indication.
3. Rogue access point detection: Automatically detect and manage wireless threats to your network. White paper, http://www.proxim.com.
4. Soft AP solutions. White paper, http://www.marvell.com/products/wireless/ softapjsp.
5. The Airmagnet project. http://www.airmagnet.com/.
6. The Airwave project. http://www.airwave.com.
7. The Inssider software. http://www.metageek.netiproducts/inssider.
8. The Netstumbler project. http://www.netstumbler.com.
9. Wavelink. http://www.wavelink.com.
10. WiSentry - Wireless Access Point Detection System. http://www.wimetrics. com/Products/WAPD.htm.
11. IEEE Standard for Wireless LAN Medium Access Control (MAC) and physical layer (PHY) specifications: Higher-speed physical layer extension in the 2.4 GHz band, 1999.
12. AirDefense. TIRED OF ROGUES? Solutions for Detecting and Eliminating Rogue Wireless Networks. White paper, http://wirelessnetworkchannel-asia. motorola.com/pdf/.
13. P. Bahl, R. Chandra, J. Padhye, L. Ravindranath, M. Singh, A. Wolman, and B. Zill. Enhancing the security of corporate Wi-Fi networks using DAIR. In Proc. MobiSys'06, 2006.
14. V. Baiamonte, K. Papagiannaki, G. lannaccone, and P. D. Torino. Detecting 802.11 wireless hosts from remote passive observations. In Proc. IFIP/TC6 Networking, 2007.
15. R. Beyah, S. Kangude, G. Yu, B. Strickland, and J. Copeland. Rogue access point detection using temporal traffic characteristics. In IEEE Global Telecommunications Conference (GLOBECOM'04), 2004.
16. G. Bianchi and D. e Inf. IEEE 802.11-saturation throughput analysis. IEEE communications letters, 2(12):318-320, 1998.
17. C. Corbett, R. Beyah, and J. Copeland. A passive approach to wireless NIC identification. In IEEE International Conference on Communications (ICC'06), 2006.
18. C. Foh and J. Tantra. Comments on IEEE 802.11 saturation throughput analysis with freezing of backoff counters. IEEE Communications Letters, 9(2):130-132, 2005.
19. S. Garg and M. Kappes. An experimental study of throughput for UDP and VoIP traffic in IEEE 802.11 b networks. In 2003 IEEE Wireless Communications and Networking (WCNC'03), 2003.
20. L. Ma, A. Teymorian, and X. Cheng. A hybrid rogue access point protection framework for commodity Wi-Fi networks. In Proc. IEEE Infocom'08, 2008.
21. D. MacDonald and W. Barkley. Microsoft Windows 2000 TCP/IP Implementation Details. White paper, http://technet.microsoft.com/en-us/library/bb726981.aspx.
22. C. Mano, A. Blaich, Q. Liao, Y. Jiang, D. Cieslak, D. Salyers, and A. Striegel. RIPPS: Rogue identifying packet payload slicer detecting unauthorized wireless hosts through network traffic conditioning. ACM Transactions on Information and System Security (TISSEC), 11(2):1-23, 2008.
23. P. Sarolahti and A. Kuznetsov. Congestion control in linux tcp. In Proceedings of the FREENIX Track: 2002 USENIX Annual Technical Conference, 2002.
24. S. Shetty, M. Song, and L. Ma. Rogue access point detection by analyzing network traffic characteristics. In IEEE Military Communications Conference (MILCOM'07), 2007.
25. Y. Song, C. Yang, and G. Gu. Who Is Peeping at Your Passwords at Starbucks? - To Catch an Evil Twin Access Point (Extended Version). http://faculty.cs.tamu.edu/guofei/etsniffer-tr09.pdf. Technical report.
26. S. Srilasak, K. Wongthavarawat, and A. Phonphoem. Integrated Wireless Rogue Access Point Detection and Counterattack System. In International Conference on Information Security and Assurance, pages 326-331, 2008.
27. K. Thompson, G. Miller, and R. Wilder. Wide-area Internet traffic patterns and characteristics. IEEE network, 11(6):10-23, 1997.
28. A. Venkataraman and R. Beyah. Rogue Access Point Detection Using Innate Characteristics of the 802.11 MAC. In International Conference on Security and Privacy in Communication Networks (SecureComm'09), 2009.
29. H. Vu and T. Sakurai. Collision probability in saturated IEEE 802.11 networks. In Australian Telecommunication Networks and Applications Conference, 2006.
30. A. Wald. Sequential Analysis. Dover Publications, 2004.
31. L. Watkins, R. Beyah, and C. Corbett. A passive approach to rogue access point detection. In Proc. IEEE Globecom'07, 2007.
32. W. Wei, S. Jaiswal, J. Kurose, and D. Towsley. Identifying 802.11 traffic from passive measurements using iterative Bayesian inference. In Proc. IEEE INFOCOM'06, 2006.
33. W. Wei, K. Suh, B. Wang, Y. Gu, J. Kurose, and D. Towsley. Passive online rogue access point detection using sequential hypothesis testing with TCP ACK-pairs. In Proceedings of the 7th ACM SIGCOMM conference on Internet measurement (IMC'07), 2007.
34. W. Wei, B. Wang, C. Zhang, J. Kurose, and D. Towsley. Classification of access network types: Ethernet, wireless LAN, ADSL, cable modem or dialup? Computer Networks, 52(17):3205-3217, 2008.
35. H. Yin, G. Chen, and J. Wang. Detecting protected layer-3 rogue APs. In Proceedings of the Fourth IEEE International Conference on Broadband Communications, Networks, and Systems (BROADNETS'07), 2007.