DETECTING MALICIOUS DEVICE
First Claim
1. A method for detecting a malicious device in a network, the method comprising:
- initiating a malicious device detection mode;
transmitting a test message to neighbor devices in the network;
determining whether a test response message is received from the neighbor devices in response to the test message; and
if so, determining a corresponding neighbor device transmitting the test response message in response to the test message as a non-malicious device;
otherwise, determining the corresponding neighbor device as a malicious device.
1 Assignment
0 Petitions
Accused Products
Abstract
A wireless access point and a method may be provided for detecting a malicious device in a network. The wireless access point may include a controller, a search unit, a message generation unit, and a determination unit. The controller may be configured to initiate a malicious device detection mode regularly at predefined intervals. The search unit may be configured to detect candidate devices broadcasting a signal with the first SSID from neighbor devices in an associated network. The message generation unit may be configured to generate a test message in the malicious device detection mode and transmit the test message to the candidate devices. The determination unit may be configured to determine a corresponding device in the candidate device as a malicious device when a test response message is not received from the corresponding device in response to the test message.
33 Citations
20 Claims
-
1. A method for detecting a malicious device in a network, the method comprising:
-
initiating a malicious device detection mode; transmitting a test message to neighbor devices in the network; determining whether a test response message is received from the neighbor devices in response to the test message; and if so, determining a corresponding neighbor device transmitting the test response message in response to the test message as a non-malicious device; otherwise, determining the corresponding neighbor device as a malicious device. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11)
-
-
12. A method for detecting a malicious device in a wireless local area network (WLAN) network by a wireless access point, the method comprising:
-
initiating a malicious device detection mode; transmitting a test message to neighbor devices located within a service area of the wireless access point; determining whether a test response message is received from the neighbor devices in response to the test message; and if so, determining a corresponding neighbor device transmitting the test response message as a non-malicious device; otherwise, determining the corresponding neighbor device as a malicious device. - View Dependent Claims (13, 14, 15, 16, 17, 18, 19)
-
-
20. A wireless access point comprising:
-
a controller configured to initiate a malicious device detection mode regularly at predefined intervals; a search unit configured to detect candidate devices broadcasting a signal with the first SSID from neighbor devices in an associated network; a message generation unit configured to generate a test message in the malicious device detection mode and transmit the test message to the candidate devices; a determination unit configured to determine a corresponding device in the candidate device as a malicious device when a test response message is not received from the corresponding device in response to the test message; and a notification unit configured to notify the determined malicious device to a related server so as to block the determined malicious device from access to the associated network.
-
Specification