Detection method and detection apparatus for identifying pseudo AP based on client

Abstract

The invention provides a detection method for identifying a pseudo AP based on a client. The detection method comprises the following steps: judging whether a to-be-detected wireless network environment contains a plurality of APs having the same SSID, and if so, determining that the APs as suspicious APs; obtaining data frames of the suspicious APs, comprising obtaining the number of data frames sent by a first suspicious AP to each user within each specified time within a monitoring time, and obtaining a total number of data frames sent by a second suspicious AP to all users connected with the second suspicious AP within each specified time; and separately calculating the similarity between each data frame number of the first suspicious AP and the total number of the data frames of the second suspicious AP, and if the similarly exceeds a preset threshold, judging that the second suspicious AP is the pseudo AP. According to the detection method provided by the invention, a user can independently detect the attack of the pseudo AP in the wireless local area network so as to achieve the purposes of maintaining the network security and protecting the user privacy, and the detection method provided by the invention can realize real-time detection in different wireless network environments.

Description

technical field [0001] The invention relates to the fields of network security, wireless communication, etc., and in particular to a client-based detection method and detection device for identifying fake APs. Background technique [0002] Compared with wired networks, 802.11-based WLANs have been widely deployed and used because of the advantages of wireless local area networks (WLANs), such as flexibility, mobility, scalability, and ease of installation. Wireless users can easily use Wi-Fi access points (APs) to connect mobile terminals such as smartphones, tablets, and laptops to the Internet in places such as homes, hotels, cafes, offices, airports, and shopping malls. It uses radio waves to provide communication between the AP and the user's devices such as smartphones, laptops, etc. [0003] However, when we conveniently use WLAN to access Internet resources, it also brings huge security risks to users. At present, the common wireless network attack methods are as fo...

AI Technical Summary

Problems solved by technology

However, this administrator-based detection method is costly, expensive, and time-consuming. Most importantly, it cannot detect wireless network security for mobile terminals in real time. Users who lack professional knowledge and security awareness are easily attacked by evil twins. lead to serious consequences

The detection method of user-based evil twin attacks is to help wireless users detect whether there are evil twin attacks in the wireless network, but wireless user resources are limited and there is no authorization list, so it is very inappropriate to design a user-based method to detect evil twin attacks Easy

Images