Research of wireless intrusion prevention systems based on plan recognition and honeypot
Guanlin Chen, Hui Lin Yao, Zebing Wang · 2009
With the fast development of WLAN, wireless intrusion prevention systems have recently become the research hotspot. In this paper, we first analyze the drawbacks of WLAN and indicate the primary 802.11-specific threats, then present the framework of the wireless IPS with an intelligent plan recognition and pre-decision engine using honeypot technology, especially illustrate the need for plan recognition in WLAN. By importing supporting degree of intrusion plan, this engine can predict the future attacks and directly respond to these actions. We design and implement an improved model for conducting plan recognition and making pre-decision. Experimental results showed that the plan recognition and pre-decision engine can not only improve detection and prevention performance but also reduce false positives evidently.