# Method for Detecting Abnormal Activity in a Group of Mobile Robots
## 5 Experimental Results
### Implementation and Analysis of the Impact of Attacks
#### 5.2.3 Deauthentication Attack Creating Fake Clients and Connections to the Access Point  
A deauthentication attack is considered as a variant of an external denial of service attack. The implementation of the deauthentication attack is possible using aireplay-ng. Aireplay-ng is a tool that includes aireplay-ng deauthentication, such as airegddon. To conduct this attack, one firstly needs to determine on which channel the access point operates.  
The result of this attack was disconnecting all wireless clients from the network that were connected to it, regardless of how the attack was implemented. It follows that the attack was successful since its goal was achieved.  
During 10 min of the attack on the mobile robot, 523,000 authentication requests were sent. After 17-20 s from the beginning of the attack, the client of the network was disconnected. After deauthentication, the client constantly tried reconnecting; however, since the access point could not handle a large number of authentication requests, the establishment of the connection was almost unsuccessful. If the client was able to connect, then, after 2-3 s, deauthentication occurred, and it tried connecting again. Also, this attack was performed on a mobile device (cell phone), which acted as an access point. After 40-50 s of the attack, the device disabled the access point. It follows that the response to this attack by different devices may differ. Based on the data obtained during the experiments, shown in Figures 11 and 12, it can be seen that the attack was resource-intensive.  
Figure 11: The power consumption of the nodes under the deauthentication attack.  
Figure 12: The CPU consumption of the nodes under the deauthentication attack.  
During the attack, 116 mAh of battery capacity was expended; thus, for greater autonomy and maintaining mobility, a portable battery with a capacity of 10,000 mAh could be used. In addition, the figure shows that the power consumption of the victim of the attack also increased compared to the normal state. This is because the victim was forced to reconnect to the access point and spend additional energy on this process.  
Figure 12 shows that this attack expended additional computational power not only for the attacker but also for the victim of the attack.  
Table 3 shows the attacks and their influence on the characteristics of the mobile device.  
From Table 3, it can be seen that the characteristics most affected by the attacks are the CPU load, power consumption, and channel availability. The influence on the characteristics of the processor load and the energy consumption is, for the most part, due to attempts to reconnect the client to the attacked network during deauthentication attacks. When SYN-flood is realized, due to the large amount of incoming traffic, CPU load is increased. The impact on the availability of the channel, with external attacks, is the impossibility of connecting to the access point of the wireless network for several reasons, depending on the reaction of the access point to the attack.