Patent ID: 8898783

Claim:
A method for detecting a malicious device in a network, the method comprising: initiating a malicious device detection mode; transmitting a test message to neighbor devices in the network; determining whether a test response message is received from the neighbor devices in response to the test message; and if so, determining a corresponding neighbor device transmitting the test response message in response to the test message as a non-malicious device; otherwise, determining the corresponding neighbor device as a malicious device, wherein the transmitting a test message to neighbor devices includes: detecting, among the neighbor devices, candidate devices that transmit a signal with a specific service set identifier (SSID); transmitting an associate request message to the detected candidate devices; receiving an associate response message from the detected candidate devices; obtaining information on the detected candidate devices from the received associate response message; and transmitting the test message to the detected candidate devices based on the obtained information.