Abstract:The broadcast nature of wireless media makes WLANs easily attacked by rogue Access Points (APs) . Rogue AP attacks can potentially cause severe privacy leakage and financial loss. Hardware fingerprinting is the state-of-the-art technology to detect rogue APs since an attacker would find it difficult to set up a rogue AP with specific hardware fingerprints. However, existing hardware fingerprints not only depend on the AP but also depend on the client, significantly limiting their application scenarios. In this work, we investigate two novel client-agnostic fingerprints, which can be extracted using commercial off-the-shelf WiFi devices, to detect rogue APs. One is the power amplifier non-linearity fingerprint and the other is the frame interval distribution fingerprint . These two fingerprints remain consistent over time and space for the same AP but vary across different APs even with the same brand, model, and firmware. We use the fingerprint similarity between the candidate AP and the authorized AP for device authentication in typical indoor environments. We have also proposed a threshold-improved authentication scheme to improve the robustness of our system in dynamic environments. Our schemes can be implemented without modifying the infrastructural APs and can work well with new clients without rebuilding the fingerprint database. We evaluate our scheme in both in-lab and field scenarios, by analyzing 18 million WiFi packets. Results show that our scheme achieves an overall 96.55% positive detection rate and a 4.31% false alarm rate. Moreover, the threshold-improved authentication scheme can further reduce the false alarm rate by 13.0%-44.8% for dynamic environments.

Research and Implementation of Enforced Access Point Design of WLAN

An Efficient EAP-Based Pre-Authentication for Inter-WRAN Handover in TV White Space

Security Analysis of WEP Algorithm Used in IEEE 802.11

Detecting Rogue Access Points Using Client-agnostic Wireless Fingerprints.

Comparative Studies on Authentication and Key Exchange Methods for 802.11 Wireless LAN

A Lightweight Key Management Scheme For 60 Ghz Wpan

Securing Wireless Systems Via Lower Layer Enforcements

Application of Design AP Based 3GPP-WLAN Interworking Security

A secure and efficient user authentication protocol for two-tiered wireless sensor networks

An Efficient and DoS-resistant User Authentication Scheme for Two-Tiered Wireless Sensor Networks

A Mutual Authentication and Privacy Mechanism for WLAN Security.

Aaa Architecture And Authentication For Wireless Lan Roaming

Evaluation of Enhanced Security Solutions in 802.11-Based Networks

Designing a Practical Access Point Association Protocol

Ap Matrix: A New Access Point Architecture for Reliable Public Wi-Fi Services

Weakness analysis and attack test for WLAN

Security Authentication of 3G-WLAN Interworking

Study of Network Authentication Based on RADIUS Protocol

Wi-Fi protected access for secure power network protection scheme

E-App: Adaptive Mmwave Access Point Planning with Environmental Awareness in Wireless LANs.

Communication Protocol of Centralized WLAN Architecture