A Novel and Light Weight Defence Mechanism for Securing Wireless Networks

Abstract — Wireless network is the network which is easy to deploy and very easy to access that network and that network is user friendly. The main reason behind wireless lan is gaining popularity because it provide benefits, like easy installation, flexibility, mobility, scalability and reduced cost of ownership. But drawback in these wireless networks is that it doesn't provide security as much as required, due to that user faces attacks of various types which are damageable to user information. Spoofing with falsified IP-MAC pair is the first step in most LAN based attacks. Address Resolution Protocol (ARP) is stateless, which is the main cause that makes spoofing possible. Several network level and host level mechanisms have been proposed to detect and mitigate ARP spoofing but each of them has their own drawback. In this proposed work a new technique is developed for detecting identity attacks or spoofed MAC attack exploited in 802.11 wireless network. Current methods of device identification includes only probe request packets which results in large amount of false positive. In our proposed work the algorithms are developed upon three frames which are required in three section of connectivity phase and that frames are probe request frame, authentication frame and association frame. The proposed scheme is successfully verified under all possible attack scenarios. The scheme is successfully validated in a test bed with various attack scenarios and the result shows the effectiveness of the proposed technique. Keywords:- IP-MAC pair, Probe frame, Association frame, Authentication frame, IEEE 802.11 wlan, spoofing attack