Automated method and system for monitoring local area computer networks for unauthorized wireless access

An apparatus for monitoring for unauthorized wireless access to a computer network, the apparatus comprising:

• a first radio interface;
• a processor unit;
• and
• a computer readable medium storing instructions executable by the processor unit configured to:
• monitor wireless communications using the first radio interface;
• detect a wireless access point device within a radio coverage range of the first radio interface, the wireless access point device being configured to perform a network address translation (NAT) function between its wired and wireless interfaces, the radio coverage range of the first radio interface including at least one connection point on a wired portion of the computer network that is to be protected from unauthorized wireless access;
• transmit a marker packet to the wireless access point device by the first radio interface over a wireless connection between a second radio interface and the wireless access point device, wherein the second radio interface is in a wireless station other than the apparatus;
• spoof identity of the second radio interface while transmitting the marker packet, the marker packet being adapted to be received by the wireless interface of the wireless access point device and being adapted to be transferred through the wireless access point device to its wired interface and being destined to a selected device coupled to the computer network;
• determine that the marker packet is received at the selected device coupled to the computer network;
• determine that the wireless access point device is connected to the wired portion of the computer network based at least upon the determining that the marker packet is received at the selected device coupled to the computer network;
• and
• determine that the wireless access point device provides unauthorized wireless access to the wired portion of the computer network based at least upon the determining that the wireless access point device is connected to the wired portion.