Rogue Access Points (RAPs) cause serious security threats to wireless networks. To detect RAPs, we propose a novel user-oriented framework based on security condition. AP's security condition which includes cipher and authentication type has been specified by the vendors. So it is difficult to be faked when authentication type is specified as IEEE 802.1X by the vendors. Authorized APs' SSID and security level have stored in database, and by comparing this information we can determine whether an AP is a rogue one or not. Furthermore, we provide users with optional secure channel. The experimental results show that the proposed framework can work efficiently.