Patent ID: 7970894
Filing Date: 2011-06-28
Classification: H04W

Abstract:
1. A method for removing false alarms resulting from spoofing, in detecting access point devices that provide unauthorized wireless access to local area computer networks, the method comprising: installing a wireless intrusion monitoring system in a geographic region, the geographic region including a wired portion of a local area network, the wireless intrusion monitoring system being configured to: detecting a wirelessly active access point (AP determining a first basic service set identifier (BSSID transferring one or more marker packets to the wired portion of the local area network, the one or more marker packets: receiving at least a subset of the first one or more wireless frames, wherein the at least the subset of the first one or more wireless frames include the BSSID ascertaining that the at least the subset of the first one or more wireless frames include the authentication information; inferring that the AP receiving second one or more wireless frames, the second one or more wireless frames including a second basic service set identifier (BSSID ascertaining that the second one or more wireless frames are devoid of an authentication information which is the predetermined function of at least the BSSID inferring that the second one or more wireless frames do not indicate that the AP