Rogue access point detection methods: A review

Abstract

Rogues are unwanted whether they are access points or clients as they steal critical data and bandwidth. To detect a rogue access point different approaches are used. These approaches are briefly classified as Client-side approach, Server-side and Hybrid approach. Every approach has its own advantages and disadvantages. Clients have limited resources and do not possess much control over network when compared with servers. Amongst all approaches Hybrid approach is efficient because it minimizes the inabilities of client side approach and adds server control for detection of Rogue Access Points (AP). This paper aims at surveying different methods of rogue Access Point detection.

WPFD: Active User-Side Detection of Evil Twins

“…Furthermore, the particular probe packets are easily detected by an experienced attacker who can ignore the probe packets to bypass the detection of Wi-Fi. The WPFD does not have this problem On the other hand, in the previous research on general rogue APs there is a summary or a discussion like Sweta et al [26], and for a round-trip time measurement with a machine learning algorithm, in Songrit et al [27]. Furthermore, as mentioned above, there are also algorithms like Ganesh et al, which is a standard algorithm of the LAN network environment [28], and Neha et al [29], which is a hash algorithm focused on WLAN security.…”

Investigasi Live Forensik Dari Sisi Pengguna Untuk Menganalisa Serangan Man in the Middle Attack Berbasis Evil Twin

“…Jenis ancaman-ancaman yang sering terjadi pada jaringan Wifi adalah ETA (Evil Twin Attack). Serangan ini dilakukan dengan memanfaatkan AP (Acsess Point) palsu yang dibuat sama persis dengan legitimate AP dengan tujuan untuk menjebak para pengguna jaringan Wifi [1], kemudian pelaku dapat melancarkan serangan MITM (Man In The Middle Attack) untuk melakukan aktivitas snifing, spofing dan kegiatan ilegal lainya.…”

“…Keterangan no 1 ditemukan dua file yaitu file Html dengan sessions index. (1) dan file Css dengan seissions css. (1), yang mana merupakan Website "mangaku.web.id" yang kemudian dibelokkan ke situs yang sengaja dibuat.…”

“…(1) dan file Css dengan seissions css. (1), yang mana merupakan Website "mangaku.web.id" yang kemudian dibelokkan ke situs yang sengaja dibuat. Keterangan no 2 terdapat dua buah file yang berekstensi Png dan Jpg.…”