Back to results
US 11,540,135 B2Granted
Characterizing intrusions using spatial reuse parameters
AssigneeCisco Technology, Inc.
InventorsGautam D. Bhanage, Benjamin J. Cizdziel, Vishal S. Desai, Ardalan Alizadeh, Khashayar Mirfakhraei
Life of this patent
Estimating the term…
Abstract
Aspects described herein include a method for use with an access point (AP). The method comprises inspecting control frames received from a rogue AP, characterizing an intrusion by the rogue AP using one or more spatial reuse parameters included in the control frames, and selecting a defensive posture for the AP based on the characterization.
Claims16
A method for use with an access point (AP), the method comprising:
- inspecting control frames received from a first rogue AP in a first spatial reuse group (SRG), wherein the AP is in a second SRG different from the first SRG;
- detecting an intrusion by the first rogue AP in response to determining that the control frames from the first rogue AP include a basic service set (BSS) color of the second SRG;
- characterizing the intrusion by the first rogue AP as malicious or benign based on a frequency at which the control frames from the first rogue AP include the BSS color of the second SRG over a predefined period of time and based on a determination of a previous intrusion by the first rogue AP on the second SRG;
- and
- selecting a defensive posture for the AP based on characterizing the intrusion as malicious;
- and
- chancing the BSS color of the second SRG based on characterizing the intrusion as benign.
4 more elements
An access point (AP) comprising:
- one or more computer processors configured to:
- detect an intrusion by a first rogue AP in a first SRG in response to determining that control frames from the first rogue AP include a BSS color of a second SRG of the AP different from the first SRG;
- characterize the intrusion as malicious or benign based on a frequency at which the control frames from the first rogue AP include the BSS color of the second SRG over a predefined period of time and based on a determination of a previous intrusion by the first rogue AP on the second SRG;
- select a defensive posture for the AP based on characterizing the intrusion as malicious;
- and
- change the BSS color of the second SRG based on characterizing the intrusion as benign.
3 more elements
A computer program product comprising:
- a non-transitory computer-readable storage medium having computer-readable program code embodied therewith, the computer-readable program code executable by one or more computer processors to perform an operation comprising:
- detecting an intrusion by a rogue AP in a first SRG in response to determining that control frames from the rogue AP include a BSS color of a second SRG of a known AP different from the first SRG;
- and
- characterizing the intrusion as malicious or benign based on a frequency at which the control frames from the rogue AP include the BSS color of the second SRG over a predefined period of time and based on a determination of a previous intrusion by the first rogue AP on the second SRG, wherein characterizing the intrusion as malicious is used to select a defensive posture for the known AP, and wherein the BSS color of the second SRG is changed based on characterizing the intrusion as benign.
1 more element
Dependencies are inferred from the claim text.