PRAPD: A novel received signal strength–based approach for practical rogue access point detection

Rogue access point attack is one of the most important security threats for wireless local networks and has attracted great attention from both academia and industry. Utilizing received signal strength information is an effective solution to detect rogue access points. However, the received signal s...

Full description

Saved in:
Bibliographic Details
Main Authors: Wenjia Wu, Xiaolin Gu, Kai Dong, Xiaomin Shi, Ming Yang
Format: Article
Language:English
Published: Wiley 2018-08-01
Series:International Journal of Distributed Sensor Networks
Online Access:https://doi.org/10.1177/1550147718795838
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1832547238752026624
author Wenjia Wu
Xiaolin Gu
Kai Dong
Xiaomin Shi
Ming Yang
author_facet Wenjia Wu
Xiaolin Gu
Kai Dong
Xiaomin Shi
Ming Yang
author_sort Wenjia Wu
collection DOAJ
description Rogue access point attack is one of the most important security threats for wireless local networks and has attracted great attention from both academia and industry. Utilizing received signal strength information is an effective solution to detect rogue access points. However, the received signal strength information is formed by multi-dimensional received signal strength vectors that are collected by multiple sniffers, and these received signal strength vectors are inevitably lacking in some dimensions due to the limited wireless transmission range and link instability. This will result in high false alarm rate for rogue access point detection. To solve this issue, we propose a received signal strength–based practical rogue access point detection approach, considering missing received signal strength values in received signal strength vectors collected in practical environment. First, we present a preprocessing scheme for received signal strength vectors, eliminating missing values by means of data filling, filtering, and averaging. Then, we perform clustering analysis on the received signal strength vectors, where we design a distance measurement method that dynamically uses partial components in received signal strength vectors to minimize the distance deviation due to missing values. Finally, we conduct the experiments to evaluate the performance of the practical rogue access point detection. The results demonstrate that the practical rogue access point detection can significantly reduce the false alarm rate while ensuring a high detection rate.
format Article
id doaj-art-8de7a9ea39e04daf9ec1a2efe8c8365e
institution Kabale University
issn 1550-1477
language English
publishDate 2018-08-01
publisher Wiley
record_format Article
series International Journal of Distributed Sensor Networks
spelling doaj-art-8de7a9ea39e04daf9ec1a2efe8c8365e2025-02-03T06:45:31ZengWileyInternational Journal of Distributed Sensor Networks1550-14772018-08-011410.1177/1550147718795838PRAPD: A novel received signal strength–based approach for practical rogue access point detectionWenjia Wu0Xiaolin Gu1Kai Dong2Xiaomin Shi3Ming Yang4School of Computer Science & Engineering, Southeast University, Nanjing, ChinaSchool of Computer Science & Engineering, Southeast University, Nanjing, ChinaSchool of Computer Science & Engineering, Southeast University, Nanjing, ChinaChina Information Consulting & Designing Institute Co. Ltd, Nanjing, ChinaSchool of Computer Science & Engineering, Southeast University, Nanjing, ChinaRogue access point attack is one of the most important security threats for wireless local networks and has attracted great attention from both academia and industry. Utilizing received signal strength information is an effective solution to detect rogue access points. However, the received signal strength information is formed by multi-dimensional received signal strength vectors that are collected by multiple sniffers, and these received signal strength vectors are inevitably lacking in some dimensions due to the limited wireless transmission range and link instability. This will result in high false alarm rate for rogue access point detection. To solve this issue, we propose a received signal strength–based practical rogue access point detection approach, considering missing received signal strength values in received signal strength vectors collected in practical environment. First, we present a preprocessing scheme for received signal strength vectors, eliminating missing values by means of data filling, filtering, and averaging. Then, we perform clustering analysis on the received signal strength vectors, where we design a distance measurement method that dynamically uses partial components in received signal strength vectors to minimize the distance deviation due to missing values. Finally, we conduct the experiments to evaluate the performance of the practical rogue access point detection. The results demonstrate that the practical rogue access point detection can significantly reduce the false alarm rate while ensuring a high detection rate.https://doi.org/10.1177/1550147718795838
spellingShingle Wenjia Wu
Xiaolin Gu
Kai Dong
Xiaomin Shi
Ming Yang
PRAPD: A novel received signal strength–based approach for practical rogue access point detection
International Journal of Distributed Sensor Networks
title PRAPD: A novel received signal strength–based approach for practical rogue access point detection
title_full PRAPD: A novel received signal strength–based approach for practical rogue access point detection
title_fullStr PRAPD: A novel received signal strength–based approach for practical rogue access point detection
title_full_unstemmed PRAPD: A novel received signal strength–based approach for practical rogue access point detection
title_short PRAPD: A novel received signal strength–based approach for practical rogue access point detection
title_sort prapd a novel received signal strength based approach for practical rogue access point detection
url https://doi.org/10.1177/1550147718795838
work_keys_str_mv AT wenjiawu prapdanovelreceivedsignalstrengthbasedapproachforpracticalrogueaccesspointdetection
AT xiaolingu prapdanovelreceivedsignalstrengthbasedapproachforpracticalrogueaccesspointdetection
AT kaidong prapdanovelreceivedsignalstrengthbasedapproachforpracticalrogueaccesspointdetection
AT xiaominshi prapdanovelreceivedsignalstrengthbasedapproachforpracticalrogueaccesspointdetection
AT mingyang prapdanovelreceivedsignalstrengthbasedapproachforpracticalrogueaccesspointdetection