Patent ID: 8369830
Filing Date: 2013-02-05
Classification: G06F,H04L,H04W

Abstract:
1. A method performed by an attack detector module for detecting attacks in a wireless data communications network which includes at least one trusted apparatus and a communications terminal that is assigned a dynamic network state corresponding to wireless traffic exchanges of the communications terminal, the method comprising: acquiring a first trusted network state for the dynamic network state of the communications terminal; acquiring trusted information via a trusted channel, wherein the trusted information is indicative of a communication between the communications terminal and the at least one trusted apparatus and the trusted channel is different from the wireless data communications network; updating the first trusted network state to a second trusted network state for the dynamic network state of the communications terminal, wherein the second trusted network state is different from the first trusted network state and the updating is based on the trusted information; monitoring, via a wireless traffic monitor, wireless traffic over the wireless data communications network; deriving a non-trusted network state for the dynamic network state of the communications terminal from the monitored wireless traffic; comparing the non-trusted network state with the second trusted network state; and determining a wireless network attack in case of incoherence between the non-trusted network state and the second trusted network state.