Wireless Device Detection via Source MAC Spoofing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for determining whether a device is wireless and accessing a network are limited by range, interference, and the inability to detect unauthorized wireless access points without communication or specific protocol interaction, particularly in cases where devices are remote or unconfigured.
Innovation Solution
A method involving sending a packet with the device's physical address as the source address to determine if a response is received, allowing differentiation between wired and wireless devices, and potentially disabling or limiting access by rogue wireless access points.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If wireless access points are installed to enable wireless device access, then ease of installation and user convenience are improved, but network security and control are worsened due to unauthorized access points and devices
Solution Approach 1:
The system performs preliminary detection by sending packets with the device's physical address as the source address before allowing network access. This preliminary action identifies wireless devices in advance, enabling security measures to be taken before unauthorized access can occur.
Solution Approach 2:
The system establishes a feedback loop by continuously monitoring network traffic for devices responding to address-matched packets. This feedback mechanism allows the system to detect and respond to unauthorized wireless devices in real-time, maintaining network security while allowing legitimate wireless access.
2Adaptability or versatility
If wireless devices are allowed to access the network, then adaptability and connectivity are improved, but detection and measurement capability are worsened due to limited range and interference
Solution Approach 1:
The system uses packet transmission and response monitoring as an intermediary mechanism to detect wireless devices. Instead of relying on direct wireless radio detection limited by range and interference, the system uses network layer packet exchange as a mediator that can reliably identify wireless devices regardless of physical distance or signal interference.
3Measurement precision
If packet detection methods are used to identify wireless devices, then measurement precision is improved, but loss of time increases due to packet exchange requirements
Solution Approach 1:
The system applies partial action by sending packets with only the device's physical address as the source address, rather than performing full protocol handshakes or multiple verification steps. This partial approach achieves sufficient detection precision to distinguish wireless from wired devices while minimizing the time penalty of packet exchange.
Data Source
AI summary
A method, system, apparatus, and computer-readable medium to determine whether a device having access to a network is wireless. A method for determining whether a device is wireless includes sending a specially-constructed packet to the device via a network. The packet is constructed so that the source address for the packet is a physical address on the network for the device. If the device does not send a response to the packet, a determination is made that the device is wireless. If the device sends a response to the packet, a determination is made that the device is wired. In one embodiment of the invention, the physical address for the device is a Media Access Control (MAC) address. The initial packet may, for example, request the physical address for the device and may be sent in response to detecting a communication to or from the suspect device.