System and method for exposing malicious clients in wireless access networks
AssigneeAlcatel Lucent
InventorsShu-Lin Chen, Vinod Choyi, Bassem Abdel-Aziz
Life of this patent
Estimating the term…
Abstract
Malicious clients within a wireless access network are identified using bait traffic transmitted between a collaborating wireless access point and a collaborating client. The bait traffic entices a malicious client to transmit malicious traffic towards the collaborating wireless access point. Upon receiving the malicious traffic, the collaborating wireless access point is able to identify the malicious client and report the presence of the malicious client within the wireless access network.
Claims20
A collaborating wireless access point within a wireless access network, comprising:
- a transceiver operable to transmit and receive bait traffic to and from a collaborating client via a direct wireless connection therebetween, the bait traffic including messages other than broadcast messages that announce the presence of the transceiver, the transceiver being further operable to receive additional traffic directly and wirelessly from a source other than the collaborating client in response to the bait traffic;
- and
- a processor coupled to receive the additional traffic and operable to determine whether the additional traffic is malicious traffic, and if the additional traffic is malicious traffic, to identify the source as a malicious client.
A wireless access network for identifying a malicious client, comprising:
- a collaborating client coupled to transmit and receive bait traffic within the wireless access network;
- and
- a collaborating wireless access point coupled to transmit and receive the bait traffic to and from the collaborating client via a direct wireless connection therebetween, the bait traffic includes messages other than broadcast messages that announce the presence of the collaborating wireless access point, and further coupled to receive additional traffic directly and wirelessly from a source other than the collaborating client in response to the bait traffic, the collaborating wireless access point being operable to determine whether the additional traffic is malicious traffic, and if the additional traffic is malicious traffic, to identify the source as a malicious client.
A method for identifying malicious clients within a wireless access network, comprising:
- transmitting bait traffic between a collaborating client and a collaborating wireless access point via a direct wireless connection therebetween, the bait traffic including messages other than broadcast messages that announce the presence of the collaborating wireless access point;
- receiving additional traffic from a source other than the collaborating client at the collaborating wireless access point;
- determining whether the additional traffic is malicious traffic;
- if the additional traffic is malicious traffic, identifying the source as a malicious client;
- and
- reporting the presence of the malicious client in the wireless access network by providing an address of the malicious client or a signature of the malicious traffic.
Dependencies are inferred from the claim text.