On fast and accurate detection of unauthorized wireless access points using clock skews

Update item information
Publication Type Journal Article
School or College College of Engineering
Department Computing, School of
Creator Kasera, Sneha K.
Other Author Jana, Suman
Title On fast and accurate detection of unauthorized wireless access points using clock skews
Date 2010-03
Description We explore the use of clock skew of a wireless local area network access point (AP) as its fingerprint to detect unauthorized APs quickly and accurately. The main goal behind using clock skews is to overcome one of the major limitations of existing solutions-the inability to effectively detect Medium Access Control (MAC) address spoofing. We calculate the clock skew of an AP from the IEEE 802.11 Time Synchronization Function (TSF) time stamps sent out in the beacon/probe response frames. We use two different methods for this purpose-one based on linear programming and the other based on least-square fit. We supplement these methods with a heuristic for differentiating original packets from those sent by the fake APs. We collect TSF time stamp data from several APs in three different residential settings. Using our measurement data as well as data obtained from a large conference setting, we find that clock skews remain consistent over time for the same AP but vary significantly across APs. Furthermore, we improve the resolution of received time stamp of the frames and show that with this enhancement, our methodology can find clock skews very quickly, using 50-100 packets in most of the cases. We also discuss and quantify the impact of various external factors including temperature variation, virtualization, clock source selection, and NTP synchronization on clock skews. Our results indicate that the use of clock skews appears to be an efficient and robust method for detecting fake APs in wireless local area networks.
Type Text
Publisher Institute of Electrical and Electronics Engineers (IEEE)
Journal Title IEEE Transactions on Mobile Computing
Volume 9
Issue 3
First Page 449
Last Page 462
DOI 10.1109/TMC.2009.145
citatation_issn 1536-1233
Subject Clock skews; Unauthorized access; Medium access control; MAC; Address spoofing; Wireless networks; Time Synchronization Function; TSF
Subject LCSH Computer networks -- Security measures
Language eng
Bibliographic Citation Jana, S., & Kasera, S. K. (2010). On fast and accurate detection of unauthorized wireless access points using clock skews. IEEE Transactions on Mobile Computing, 9(3), 449-62.
Rights Management (c) 2010 IEEE. Personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution to servers or lists, or to reuse any copyrighted component of this work in other works must be obtained from the IEEE. http://dx.doi.org/10.1109/TMC.2009.145
Format Medium application/pdf
Format Extent 1,992,103 bytes
Identifier ir-main,12120
ARK ark:/87278/s6765zjd
Setname ir_uspace
Date Created 2012-06-13
Date Modified 2012-06-13
ID 703465
Reference URL https://collections.lib.utah.edu/ark:/87278/s6765zjd
Back to Search Results