Security Appliance for Protecting Power-Saving Wireless Devices Against Attack

A method of protecting a client device against computer security threats, the method comprising employing at least one hardware processor of a security appliance to:

• monitor wireless communications between a client device and an administration device to determine a notification pattern specific to the client device, wherein the client device is configured to emit availability notifications and wherein the administration device is configured to initiate peer-to-peer connections with the client device by responding to the availability notifications;
• in response to detecting a wireless communication comprising an availability notification, determine whether the wireless communication fits the notification pattern;
• and
• in response to determining whether the wireless communication fits the notification pattern, if no, transmit another wireless communication configured to initiate a peer-to-peer connection with the sender of the wireless communication, the other wireless communication further configured to include an identifier of the administration device.

A non-transitory computer-readable medium storing instructions which, when executed by at least one hardware processor of a security appliance, cause the security appliance to:

• monitor wireless communications between a client device and an administration device to determine a notification pattern specific to the client device, wherein the client device is configured to emit availability notifications and wherein the administration device is configured to initiate peer-to-peer connections with the client device by responding to the availability notifications;
• in response to detecting a wireless communication comprising an availability notification, determine whether the wireless communication fits the notification pattern;
• and
• in response to determining whether the wireless communication fits the notification pattern, if no, transmit another wireless communication configured to initiate a peer-to-peer connection with the sender of the wireless communication, the other wireless communication further configured to include an identifier of the administration device.