Characterizing Wi-Fi Man-In-the-Middle Attacks

A Threshold-Based Detection Approach To Detect Fake Access Points and Jamming Attacks on IEEE 802.11 Networks: Implementation, Results and Limitations

“…We want to differentiate our work by adopting a holistic approach to detect the attacks. Jamming attacks can be combined with a fake access point attack to increase the latter's effectiveness [1]. Deauthentication attacks [1] have a similar effect on fake access point attacks.…”

“…Jamming attacks can be combined with a fake access point attack to increase the latter's effectiveness [1]. Deauthentication attacks [1] have a similar effect on fake access point attacks. We would like to have a single Network Intrusion Detection System that can detect the three attacks when they are perpetrated independently and simultaneously.…”

“…IEEE 802.11 networks are, for instance, vulnerable to jamming and fake access points attacks. To protect these types of networks, we seek, in our research, to implement a Network Intrusion Detection System (NIDS) 1 to detect jamming and fake access point attacks on IEEE 802.11 networks in infrastructure mode.…”

“…In our work, we considered frequency sweeping jammers because, even though their use is prohibited, they are relatively easy to obtain. A fake access point attack consists in the identity usurpation of a licit access point in 1 A Network Intrusion Detection System is a system that analyzes incoming network traffic to detect anomalies, https://en.wikipedia.org/wiki/Intrusion d etection s ystem order to trick users into thinking that the fake access point is the licit one. When a fake access point attack is successful, all the communication of devices in the 802.11 network passes through the fake access point rather than the licit access point.…”

“…When a fake access point attack is successful, all the communication of devices in the 802.11 network passes through the fake access point rather than the licit access point. The attacker who is in control of the fake access point has therefore control over the communication and can read, modify or generate frames 2 [1].…”