SDN-based Attack Detection in Wireless Local Area Networks
Radoslaw Cwalinski, Hartmut Koenig · 2018
In this paper we propose an novel approach to secure enterprise Wireless Local Area Networks (WLANs) by leveraging the Software-defined Networking (SDN) paradigm to detect and mitigate attack attempts in WLANs. We extend our SDN platform from [1] to implement a client localization mechanism that exploits information from the physical and MAC layers offered by current wireless chipsets to localize transmitting clients. Based on location information, we create a “virtual perimeter” to prevent WLAN access for clients from outside of the defined area. We further introduce a single-channel WLAN model as a possible solution optimization. Our evaluation shows that the proposed solution succeeds in identifying WLAN Denial-of-Service attacks, such as IEEE 802.11 deauthentication.