Patent ID: 7975300

Claim:
A method of detecting whether network entities in a wireless local area network, having at least one access point accessed by at least one wireless mobile device, are being subjected to attack by an intruder device and of obviating the effects of the attack, comprising: isolating the entity and recovering the entity from the effects of the attack by intruders using a local monitor proximate the access point that sniffs wireless packets and transmits information via a wireline connection to a global monitor residing within the network that manages multiple local monitors; providing software on said wireless mobile devices for recovering said mobile devices from the effects of an attack by an intruder; wherein said providing software on said mobile devices for recovering network entities from the effects of an attack by an intruder includes providing user agent software on potential victims' said mobile-devices that access said wireless local area network via said access point to recover said mobile devices from malicious attacks by said intruder device, and preventing further attacks by said intruder device, said user agent software on said mobile devices causing said user mobile devices to avoid said intruder based on an alert communication from said local monitor.