Shielding in wireless networks
View Patent ↗Exemplary embodiments of methods and apparatuses to provide shielding from key cracking in wireless networks are described. In one embodiment, a first frame having a first content is identified. Determination is made whether the first frame needs to be shielded. A second frame having at least a portion of the first content is transmitted in response to determining that the first frame needs to be shielded. The first frame has data encrypted with a first encryption and the second frame has data encrypted with a second encryption.
1. A machine-implemented method, comprising:
identifying a first frame;
determining whether the first frame needs to be shielded; and
transmitting a second frame having at least a portion that is a duplicate of the first frame in response to the determining that the first frame needs to be shielded, wherein the first frame has data encrypted with a first encryption and the second frame has the data encrypted with a second encryption.
2. The machine-implemented method of claim 1 , wherein the transmitting the second is performed using one or more stealth techniques to make the second frame appear indistinguishable from the first frame to a hacker.
3. The machine-implemented method of claim 1 , wherein the second frame has data encrypted with an invalid integrity check value.
4. The machine-implemented method of claim 1 , wherein the second frame has a fake station address.
5. The machine-implemented method of claim 1 , wherein the transmitting of the second frame is performed with a variable signal strength.
6. The machine-implemented method of claim 1 , wherein the second frame has a current frame sequence number.
7. The machine-implemented method of claim 1 , wherein a transmission rate of the second frame is determined based on the transmission rate of the first frame.
8. The machine-implemented method of claim 1 , further comprising:
identifying a third frame having a second content transmitted to an access point;
transmitting a fourth frame having at least a portion of the second content to the access point based on the identifying;
identifying a retransmission of the third frame having a third content by the access point; and
transmitting a fifth frame having at least a portion of the third content based on the retransmission.
9. The machine-implemented method of claim 8 , wherein the first frame includes a first address resolution protocol (“ARP”) reply sent by an access point, and the second frame includes a second ARP reply having at least a portion of a content of the first ARP reply sent by the access point the third frame includes a first ARP request to an access point; the fourth frame includes a second ARP request having at least a portion of a content of the first ARP request to the access point; the fifth frame includes a third ARP request having at least a portion of the retransmitted first ARP request to the access point.
10. The machine-implemented method of claim 1 , further comprising:
determining whether the first frame has an ARP format.
11. The machine-implemented method of claim 1 , further comprising:
monitoring one or more frames to determine a current frame sequence number.
12. The machine-implemented method of claim 8 , wherein each of the fourth frame, and the fifth frame has a current frame sequence number.
13. The machine-implemented method of claim 8 , wherein a transmission rate of the fourth frame is determined based on the transmission rate of the third frame; and a transmission rate of the fifth frame is determined based on the transmission rate of the third frame.
14. The machine-implemented method of claim 8 , wherein each of the fourth frame and the fifth frame is transmitted with a variable signal strength.
15. A non-transitory machine-readable medium storing executable program instructions which cause a data processing system to perform operations, comprising:
identifying a first frame;
determining whether the first frame needs to be shielded; and
transmitting a second frame having at least a portion that is a duplicate of the first frame in response to the determining that the first frame needs to be shielded, wherein the first frame has data encrypted with a first encryption and the second frame has the data encrypted with a second encryption.
16. The non-transitory machine-readable medium of claim 15 , wherein the transmitting the second frame is performed using one or more stealth techniques to make the second frame appear indistinguishable from the first frame to a hacker.
17. The non-transitory machine-readable medium of claim 15 , wherein the second frame has data encrypted with an invalid integrity check value.
18. The non-transitory machine-readable medium of claim 15 , wherein the second frame has a fake station address.
19. The non-transitory machine-readable medium of claim 15 , wherein the transmitting of the second frame is performed with a variable signal strength.
20. The non-transitory machine-readable medium of claim 15 , wherein the second frame has a current frame sequence number.
21. The non-transitory machine-readable medium of claim 15 , wherein a transmission rate of the second frame is determined based on the transmission rate of the first frame.
22. The non-transitory machine-readable medium of claim 15 , further including instructions that cause the data processing system to perform operations comprising:
identifying a third frame having a second content transmitted to an access point;
transmitting a fourth frame having at least a portion of the second content to the access point based on the identifying;
identifying a retransmission of the third frame having a third content by the access point; and
transmitting a fifth frame having at least a portion of the third content based on the retransmission.
23. The non-transitory machine-readable medium of claim 15 , wherein the first frame includes a first address resolution protocol (“ARP”) reply sent by an access point, and the second frame includes a second ARP reply having at least a portion of a content of the first ARP reply sent by the access point the third frame includes a first ARP request to an access point; the fourth frame includes a second ARP request having at least a portion of a content of the first ARP request to the access point; the fifth frame includes a third ARP request having at least a portion of the retransmitted first ARP request to the access point.
24. The non-transitory machine-readable medium of claim 15 , further including instructions that cause the data processing system to perform operations comprising determining whether the first frame has an ARP format.
25. The non-transitory machine-readable medium of claim 15 , further including instructions that cause the data processing system to perform operations comprising:
monitoring one or more frames to determine a current frame sequence number.
26. The non-transitory machine-readable medium of claim 23 , wherein each of the fourth frame, and the fifth frame has a current frame sequence number.
27. The non-transitory machine-readable medium of claim 23 , wherein a transmission rate of the fourth frame is determined based on the transmission rate of the third frame; and a transmission rate of the fifth frame is determined based on the transmission rate of the third frame.
28. The non-transitory machine-readable medium of claim 23 , wherein each of the fourth frame and the fifth frame is transmitted with a variable signal strength.
29. A system, comprising:
a memory, and
a processor coupled to the memory, wherein the processor is configured identify a first frame; to determine whether the first frame needs to be shielded; and
to transmit a second frame having at least a portion that is a duplicate of the first frame in response to the determining that the first frame needs to be shielded, wherein the first frame has data encrypted with a first encryption and the second frame has the data encrypted with a second encryption.
30. The system of claim 29 , wherein the transmitting the second frame is performed based on one or more stealth techniques to make the second frame appear indistinguishable from the first frame to a hacker.
31. The system of claim 29 , wherein the second frame has data encrypted with an invalid integrity check value.
32. The system of claim 29 , wherein the second frame has a fake station address.
33. The system of claim 29 , wherein the transmitting of the second frame is performed with a variable signal strength.
34. The system of claim 29 , wherein the second frame has a current frame sequence number.
35. The system of claim 29 , wherein a transmission rate of the second frame is determined with the transmission rate of the first frame.
36. The system of claim 29 , wherein the processor is further configured to
identify a third frame having a second content transmitted to an access point;
transmit a fourth frame having at least a portion of the second content to the access point based on the identifying;
identify a retransmission of the third frame having a third content by the access point; and
transmit a fifth frame having at least a portion of the third content based on the retransmission.