Enhancing the security of corporate Wi-Fi networks using DAIR Export

@inproceedings{citeulike:5735188, abstract = {We present a framework for monitoring enterprise wireless networks using desktop infrastructure. The framework is called DAIR, which is short for Dense Array of Inexpensive Radios . We demonstrate that the DAIR framework is useful for detecting rogue wireless devices (e.g., access points) attached to corporate networks, as well as for detecting Denial of Service attacks on Wi-Fi networks.Prior proposals in this area include monitoring the network via a combination of access points (APs), mobile clients, and dedicated sensor nodes. We show that a dense deployment of sensors is necessary to effectively monitor Wi-Fi networks for certain types of threats, and one can not accomplish this using access points alone. An ordinary, single-radio AP can not monitor multiple channels effectively, without adversely impacting the associated clients. Moreover, we show that a typical deployment of access points is not sufficiently dense to detect the presence of rogue wireless devices. Due to power constraints, mobile devices can provide only limited assistance in monitoring wireless networks. Deploying a dense array of dedicated sensor nodes is an expensive proposition.Our solution is based on two simple observations. First, in most enterprise environments, one finds plenty of desktop machines with good wired connectivity, and spare CPU and disk resources. Second, inexpensive USB-based wireless adapters are commonly available. By attaching these adapters to desktop machines, and dedicating the adapters to the task of monitoring the wireless network, we create a low cost management infrastructure.}, address = {New York, NY, USA}, author = {Bahl, Paramvir and Chandra, Ranveer and Padhye, Jitendra and Ravindranath, Lenin and Singh, Manpreet and Wolman, Alec and Zill, Brian}, booktitle = {MobiSys '06: Proceedings of the 4th international conference on Mobile systems, applications and services}, citeulike-article-id = {5735188}, citeulike-linkout-0 = {http://portal.acm.org/citation.cfm?id=1134680.1134682}, citeulike-linkout-1 = {http://dx.doi.org/10.1145/1134680.1134682}, doi = {10.1145/1134680.1134682}, isbn = {1-59593-195-3}, keywords = {80211, enterprise, security}, location = {Uppsala, Sweden}, pages = {1--14}, posted-at = {2009-09-07 15:42:36}, priority = {2}, publisher = {ACM}, title = {Enhancing the security of corporate Wi-Fi networks using DAIR}, url = {http://dx.doi.org/10.1145/1134680.1134682}, year = {2006} }

TY - CONF ID - citeulike:5735188 L3 - citeulike-article-id:5735188 N2 - We present a framework for monitoring enterprise wireless networks using desktop infrastructure. The framework is called DAIR, which is short for Dense Array of Inexpensive Radios . We demonstrate that the DAIR framework is useful for detecting rogue wireless devices (e.g., access points) attached to corporate networks, as well as for detecting Denial of Service attacks on Wi-Fi networks.Prior proposals in this area include monitoring the network via a combination of access points (APs), mobile clients, and dedicated sensor nodes. We show that a dense deployment of sensors is necessary to effectively monitor Wi-Fi networks for certain types of threats, and one can not accomplish this using access points alone. An ordinary, single-radio AP can not monitor multiple channels effectively, without adversely impacting the associated clients. Moreover, we show that a typical deployment of access points is not sufficiently dense to detect the presence of rogue wireless devices. Due to power constraints, mobile devices can provide only limited assistance in monitoring wireless networks. Deploying a dense array of dedicated sensor nodes is an expensive proposition.Our solution is based on two simple observations. First, in most enterprise environments, one finds plenty of desktop machines with good wired connectivity, and spare CPU and disk resources. Second, inexpensive USB-based wireless adapters are commonly available. By attaching these adapters to desktop machines, and dedicating the adapters to the task of monitoring the wireless network, we create a low cost management infrastructure. CY - Uppsala, Sweden SN - 1-59593-195-3 AD - New York, NY, USA EP - 14 TI - Enhancing the security of corporate Wi-Fi networks using DAIR PB - ACM T2 - MobiSys '06: Proceedings of the 4th international conference on Mobile systems, applications and services SP - 1 KW - 80211 KW - enterprise KW - security AU - Bahl, Paramvir AU - Chandra, Ranveer AU - Padhye, Jitendra AU - Ravindranath, Lenin AU - Singh, Manpreet AU - Wolman, Alec AU - Zill, Brian PY - 2006/// UR - http://dx.doi.org/10.1145/1134680.1134682 ER -