The Wireless Intrusion Detection System Based on Data Link Layer
Feng Liu-ping, Xiangnan Liu · Journal of Guilin University of Electronic Technology · 2005
Abstrcat Wireless network is prone to attacks due to the inherited characteristics and security vulnerabilities of IEEE 802.11 standard. The traditional intrusion detection systems are limited when they are used in wireless network. Aiming at the particularity of wireless attacks, a distributed wireless intrusion detection system is introduced and implemented. The system is running on Linux. Raw packets of wireless transmission are captured and analyzed according to the specialties of IEEE 802.11 MAC layer. Then the attacks of Wardriving intrusion, rogue AP, DoS attack and MAC address spoofing are detected. Testing results show that the system can detect and monitor wireless network effectively. The system can provide a basic safeguard along with other security strategies.