Ahmad, Amran and Hassan, Suhaidi and Omar, Mohd Hasbullah (2013) Inbound time stamping for detecting rogue access point. In: 4th International Conference on Computing and Informatics (ICOCI 2013), 28 -30 August 2013, Kuching, Sarawak, Malaysia.

PDF Restricted to Registered users only Download (391kB) | Request a copy

Abstract

Rogue Access Point (RAP) is a network vulnerability phenomenon of improper usage of wireless Access Point unknown to an organizational network engineer.Once it is inside the subnet or Local Area Network (wired structure) then we need to rectify of its availability.The process of rectifying can be classified into passive monitoring, using visualization and traffic characteristic.We prefer traffic characteristic scanning where a packet capturing can become one of the best tools to differentiate between wired and wireless network.Our main concentration is time stamping as a value added to packet capturing for wired and wireless differentiation.The time stamping is done at two point inbound inside subnet focusing on a PAYLOAD and its ACK using network test bed measured by finding an average of 100 PAYLOAD-ACK pairs.The test show about 16 to 56 percent differences between wired and wireless g mode and 15 to 26 percent differences between wired and wireless n mode.As a result, it shows that there is more delay on wireless than the wired and easier for us to detect RAP existence in wired network.

Item Type:	Conference or Workshop Item (Paper)
Additional Information:	ISBN: 9789832078791 Organized by: Universiti Utara Malaysia
Uncontrolled Keywords:	RAP, inbound time stamping, PAYLOAD-ACK pair
Subjects:	Q Science > QA Mathematics > QA76 Computer software
Divisions:	College of Arts and Sciences
Depositing User:	Dr. Amran Ahmad
Date Deposited:	24 Aug 2014 04:39
Last Modified:	24 Aug 2014 04:39
URI:	https://repo.uum.edu.my/id/eprint/11997

Actions (login required)

View Item