Rogue access point detection using multi-path verification

Abstract

Various embodiments provide methods, devices, and non-transitory processor- readable storage media enabling rogue access point detection with a communications device by sending multiple probes via different network connections to a remote server and receiving probe replies. Various embodiments may include a communication device transmitting a first probe addressed to a server via a first network connection and a second probe addressed to the server via a second network connection. Upon receiving a first probe reply from the server via the first network connection and a second probe reply fromthe server via the second network connection server, the communications device may analyze the received probe replies to determine whether an access point of either the first network or the second network is a rogue access point.

Description

Background technique [0001] The presence of destructive or "unauthorized" network-side devices poses a threat to data privacy. These unauthorized devices can masquerade as authorized access points, monitoring and routing incoming network traffic. Once a user connects to an unauthorized access point, the unauthorized device may perform various attacks such as man-in-the-middle attacks, domain name server (DNS) spoofing, traffic forwarding, and denial-of-service (DoS) attacks. Data packets received by unauthorized devices may be modified, rerouted to malicious third parties, or discarded entirely, disrupting normal network traffic patterns and exposing data to unauthorized persons. [0002] A growing number of access technologies enable user equipment to connect to access points, resulting in a steady increase in the number of attack vectors presented by any given access point. The convergence of Wi-Fi and wireless wide area networks (WWANs) has further increased the number an...

Images