Defending against Wi-Fi spoofing attacks

A system for detecting falsified wireless networking signals, comprising:

• a network interface, including a transceiver configured to communicate via packetized information via a wireless networking protocol;
• a processor;
• and
• a memory having stored thereon a set of instructions which, when executed by the processor, cause the system to:
• detect a group of first access points (APs) broadcasting wireless networking signals;
• make a determination whether the group of first APs contains at least one falsified wireless networking signal;
• cause the system to make a request to a localization service in relation to the group of first APs, wherein:
• the request is made as part of a determination on whether the group of first APs contains at least one falsified signal, and
• the request includes a group of reference APs located at a known location different from the location of the group of first APs;
• when a determination is made that the group of first APs does contain at least one falsified wireless networking signal, perform an analysis of each AP of the group of first APs using at least one of:
• a pair-wise comparison of AP locations, or an analysis of physical layer attributes of the signals broadcasted by each AP of the group of first APs;
• identify which APs of the group of first APs is falsified;
• and
• initiate a mitigating action relative to the falsified APs that are identified.