Detecting address spoofing in wireless network environments
AssigneeCisco Technlogy, Inc.
InventorsPatrice Calhoun, Nancy Cam-Winget, Mark Krischer, Robert O'Hara
Life of this patent
Estimating the term…
Abstract
Methods, apparatuses and systems directed to detecting address spoofing in wireless networks by, after receiving a wireless management frame, transmitting verification messages to determine whether a given wireless node (e.g., a wireless access point, or wireless client) has legitimately lost its connection state.
Claims28
An apparatus for communicating with a wireless node, the apparatus comprising:
- one or more processors;
- a memory;
- a network interface;
- and
- a wireless network application operable to:
- access a wireless management frame comprising a source address identifying a wireless node;
- cause the network interface to transmit a secured verification message to the wireless node if the memory comprises security-state information associated with the wireless node;
- and
- apply one or more security policies in response to a response to the verification message from the wireless node.
A method for communicating with a wireless node, the method comprising:
- accessing a wireless management frame comprising a source address identifying a wireless node;
- causing a network interface to transmit a secured verification message to the wireless node if a memory associated with a wireless network application executing the method comprises security-state information associated with the wireless node;
- and
- applying one or more security policies in response to a response to the verification message from the wireless node.
Logic for communicating with a wireless node, the logic encoded in one or more media for execution and when executed operable to:
- access a wireless management frame comprising a source address identifying a wireless node;
- cause a network interface to transmit a secured verification message to the wireless node if a memory associated with a wireless network application executing the method comprises security-state information associated with the wireless node;
- and
- apply one or more security policies in response to a response to the verification message from the wireless node.
A system for communicating with a wireless node, the system comprising:
- means for accessing a wireless management frame comprising a source address identifying a wireless node;
- means for causing a network interface to transmit a secured verification message to the wireless node if a memory associated with a wireless network application executing the method comprises security-state information associated with the wireless node;
- and
- means for applying one or more security policies in response to a response to the verification message from the wireless node.
Dependencies are inferred from the claim text.