Wireless networks security system

• US 20030135762A1
• Filed: 12/20/2002
• Published: 07/17/2003
• Est. Priority Date: 01/09/2002
• Status: Abandoned Application

• Current Assignee: Peel Wireless Incorporated
• Original Assignee: Peel Wireless Incorporated
• Inventors: Macaulay, Tyson
• Application Number:
  US10/323,728
• Publication Number:
  US 20030135762A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04L 63/1491 using deception as countermeasure, e.g. honeypots, honeynets, decoys or entrapment
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 24/00 Supervisory, monitoring or testing arrangements
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

An IEEE 802.11 security system for monitoring wireless networks with a view to detecting and locating unauthorized or threatening IEEE 802.11 devices entering a user'"'"'s wireless network environment or a facility not intended to support wireless networks is disclosed. The security system comprises a network appliance subsystem and a portable computing subsystem with data means to interface between the two systems. Optionally, counter-measuring means for launching neutralizing and/or disabling counter-measures against a suspected device upon activation can be incorporated into the security system. A method of operation of the IEEE 802.11 security system is also disclosed.

Claims

1. An IEEE 802.11 security system for monitoring wireless networks and detecting, neutralizing and locating unauthorized or threatening IEEE 802.11 devices, said security system comprising a network appliance subsystem and a portable computing subsystem, wherein,

said network appliance subsystem comprises:

signal processing means for detecting and monitoring IEEE 802.11 signals;

analytical means for analysing information gathered from said unauthorized or threatening IEEE 802.11 devices and determining nature of security breach; and

alerting means for alarming administrative staff of said unauthorized or threatening IEEE 802.11 devices;

and said portable computing subsystem comprises;

a directional antenna for locating said unauthorized or threatening IEEE 802.11 devices; and

signal processing means for managing IEEE 802.11 interface and interpreting information gathered by said directional antenna and data means to interface between said network appliance subsystem and said portable computing subsystem.

3. The IEEE 802.11 security system of claim 1, further comprising means for counter-measuring security breaches initiated by the unauthorized or threatening IEEE 802.11 devices, said counter-measuring means operatively interfacing with said network appliance subsystem and launches neutralizing and/or disabling counter-measures against a suspected device upon activation.

5. The IEEE 802.11 security system of claim 1, said system is directed to IEEE 802.11 WLAN in general.

7. The IEEE 802.11 security system of claim 5, said system is directed to IEEE 802.11b or IEEE 802.11a or IEEE 802.11g.

9. The IEEE 802.11 security system of claim 1, said nature of security breach being covered by the system includes unauthorized association, attempted association, jamming, sabotage, network lurking, masquerade, access point masquerade, Man-In-The-Middle, Wireless Equivalent Privacy (WEP) breaches, Station2Staion attacks and Denial Of Services.

11. The IEEE 802.11 security system of claim 3, said counter-measuring means is installed and run from either a stationary server appliance or from a mobile computing device.

2. An IEEE 802.11 security system for monitoring wireless networks and detecting, neutralizing and locating unauthorized or threatening IEEE 802.11 devices, said security system comprising a network appliance subsystem and a portable computing subsystem, wherein,

said network appliance subsystem comprises:

signal processing means for detecting and monitoring IEEE 802.11 signals;

analytical means for analysing information gathered from said unauthorized or threatening IEEE 802.11 devices and determining nature of security breach;

alerting means for alarming administrative staff of said unauthorized or threatening IEEE 802.11 devices;

decoying means for distracting and alluring the attention of said unauthorized or threatening IEEE 802.11 devices; and

deceptive means for tricking lurking, unauthorized or eavesdropping IEEE 802.11 devices into revealing themselves by attempted associations with said decoying means;

and said portable computing subsystem comprises;

a directional antenna for locating said unauthorized or threatening IEEE 802.11 devices; and

signal processing means for managing IEEE 802.11 interface and interpreting information gathered by said directional antenna and data means to interface between said network appliance subsystem and said portable computing subsystem.

4. The IEEE 802.11 security system of claim 2, further comprising means for counter-measuring security breaches initiated by the unauthorized or threatening IEEE 802.11 devices, said counter-measuring means operatively interfacing with said network appliance subsystem and launches neutralizing and/or disabling counter-measures against a suspected device upon activation.

6. The IEEE 802.11 security system of claim 2, said system is directed to IEEE 802.11 WLAN in general.

8. The IEEE 802.11 security system of claim 6, said system is directed to IEEE 802.11b or IEEE 802.11a or IEEE 802.11g.

10. The IEEE 802.11 security system of claim 2, said nature of security breach being covered by the system includes unauthorized association, attempted association, jamming, sabotage, network lurking, masquerade, access point masquerade, Man-In-The-Middle, Wireless Equivalent Privacy (WEP) breaches, Station2Staion attacks and Denial Of Services.

12. The IEEE 802.11 security system of claim 4, said counter-measuring means is installed and run from either a stationary server appliance or from a mobile computing device.

13. A method for monitoring IEEE 802.11 wireless networks and detecting, neutralizing and locating unauthorized or threatening IEEE 802.11 devices, said method comprising interfacing between a network appliance subsystem and a portable computing subsystem, wherein,

operation of said network appliance subsystem consists of:

sensing an interference or attack from the unauthorized or threatening IEEE 802.11 device;

detecting and monitoring IEEE 802.11 signals with a signal processing means;

analysing information gathered from said unauthorized or threatening IEEE 802.11 devices and determining nature of security breach by an analytical means; and

alarming a user presence of said unauthorized or threatening IEEE 802.11 devices through an alerting means;

and operation of said portable computing subsystem consists of;

locating said unauthorized or threatening IEEE 802.11 devices through a directional antenna; and

managing IEEE 802.11 interface and interpreting information gathered by said directional antenna via a signal processing means.

15. The method for monitoring IEEE 802.11 wireless networks and detecting, neutralizing and locating unauthorized or threatening IEEE 802.11 devices entering said wireless networks of claim 13, said method of operation of said network appliance subsystem further comprises deceptive means for tricking lurking, unauthorized or eavesdropping IEEE 802.11 devices into revealing themselves by attempted associations with said decoying means.

17. The method for monitoring IEEE 802.11 wireless networks and detecting, neutralizing and locating unauthorized or threatening IEEE 802.11 devices entering said wireless networks of claims 13, further comprising counter-measuring security activity initiated by the unauthorized or threatening IEEE 802.11 devices by activating counter-measuring means which operatively interfacing with said network appliance subsystem and launching neutralizing and/or disabling counter-measures against a suspected device.

14. A method for monitoring IEEE 802.11 wireless networks and detecting, neutralizing and locating unauthorized or threatening IEEE 802.11 devices entering said wireless networks, said method comprising interfacing between a network appliance subsystem and a portable computing subsystem, wherein,

operation of said network appliance subsystem consists of:

sensing an interference or attack from the unauthorized or threatening IEEE 802.11 device via a real-time alerting mechanism;

detecting and monitoring IEEE 802.11 signals with a signal processing means;

analysing information gathered from said unauthorized or threatening IEEE 802.11 devices and determining nature of security breach by an analytical means;

alarming a user presence of said unauthorized or threatening IEEE 802.11 devices through an alerting means; and

distracting and alluring the attention of said unauthorized or threatening IEEE 802.11 devices with decoying means;

and operation of said portable computing subsystem consists of;

locating said unauthorized or threatening IEEE 802.11 devices through a directional antenna; and

managing IEEE 802.11 interface and interpreting information gathered by said directional antenna via a signal processing means.

16. The method for monitoring IEEE 802.11 wireless networks and detecting, neutralizing and locating unauthorized or threatening IEEE 802.11 devices entering said wireless networks of claim 14, said method of operation of said network appliance subsystem further comprises deceptive means for tricking lurking, unauthorized or eavesdropping IEEE 802.11 devices into revealing themselves by attempted associations with said decoying means.

18. The method for monitoring IEEE 802.11 wireless networks and detecting, neutralizing and locating unauthorized or threatening IEEE 802.11 devices entering said wireless networks of claims 14, further comprising counter-measuring security activity initiated by the unauthorized or threatening IEEE 802.11 devices by activating counter-measuring means which operatively interfacing with said network appliance subsystem and launching neutralizing and/or disabling counter-measures against a suspected device.