Wireless intrusion detection system and method
View Patent ↗A wireless access device in a wireless network, whether a known or unknown entity, can be located using a geolocation system. A signal strength is determined by a wireless intrusion detection system (WIDS) node in a wireless network for each wireless access device that it detects. Based on the signal strength, an approximate distance from the node is determined, which, in one embodiment corresponds to a radius of a circle around the node. To account for error, an approximation band of the circle is calculated that will allow a user to determine the approximate location of the device within the wireless network.
1. A method, performed by a wireless intrusion detection system, comprising:
determining, by a processor of the wireless intrusion detection system, locations of a plurality of wireless access devices;
comparing, by the processor, said locations of said plurality of wireless access devices to policy elements applicable to said plurality of wireless access devices; and
creating, by the processor, an alert if a wireless access device of said plurality of wireless access devices violates more than a threshold number of said policy elements.
2. A method as in claim 1 , where said determining further comprises determining approximate locations of the plurality of wireless access devices.
3. A method as in claim 1 , where each policy element is selected from a group including fixed wireless access device location, moving wireless access device, movable wireless access device, or unknown wireless access device.
4. The method of claim 1 where the plurality of wireless access devices includes a wireless access point.
5. The method of claim 1 where the plurality of wireless access devices includes a wireless client device.
6. The method of claim 1 where the determining includes:
determining the locations of the plurality of wireless access devices using triangulation.
7. A wireless intrusion detection system comprising:
a memory to store instructions; and
a processor to execute the instructions to:
determine locations of a plurality of wireless access devices;
compare the locations of the plurality of wireless access devices to policy elements applicable to the plurality of wireless access devices; and
create an alert if a wireless access device of the plurality of wireless access devices violates more than a threshold number of the policy elements.
8. The system as in claim 7 , where, when determining locations, the processor is to:
determine approximate locations of the plurality of wireless access devices.
9. The system of claim 7 , where the plurality of wireless access devices includes a wireless access point.
10. The system of claim 7 , where the plurality of wireless access devices includes a wireless client device.
11. The system of claim 7 , where, when determining locations, the processor is to:
determine the locations of the plurality of wireless access devices using triangulation.