Wireless ad hoc network security
View Patent ↗Providing network security includes detecting network traffic associated with an ad hoc network that includes a first station and a second station, and preventing data sent by the first station from reaching the second station.
1. A method for providing network security, comprising:
detecting network traffic associated with a network, the network including a first station and a second station; and
preventing data sent by the first station from reaching the second station by fragmenting the network so that the first station is on a first wireless network and the second station is on a second wireless network different than the first wireless network.
2. The method as recited in claim 1 , wherein preventing data sent by the first station from reaching the second station includes sending decoy information to the first station.
3. The method as recited in claim 2 , wherein the decoy information includes a Service Set Identifier (SSID) being the same SSID as the network and a Basic Service Set Identifier (BSSID) assigned to the first wireless network that is different from the BSSID of the network.
4. The method as recited in claim 3 , wherein preventing data sent by the first station from reaching the second station further includes sending decoy information to the second station.
5. The method as recited in claim 4 , wherein the decoy information to the second station includes a Service Set Identifier (SSID) being the same SSID as the network and a Basic Service Set Identifier (BSSID) assigned to the second wireless network that is different from the BSSID of the network.
6. The method as recited in claim 5 , wherein the BSSID assigned to the first wireless network differs from the BSSID assigned to the second wireless network.
7. The method as recited in claim 2 , wherein the decoy information includes a beacon.
8. The method as recited in claim 7 , wherein the beacon is at least one frame including a timestamp set to a time ahead of current times of local timers in the first station and the second station.
9. The method as recited in claim 2 , wherein the decoy information includes a probe response packet.
10. The method as recited in claim 2 , wherein the decoy information includes Transmission Control Protocol (TCP) information.
11. The method as recited in claim 2 , wherein the decoy information includes Internet Protocol (IP) information.
12. The method as recited in claim 1 , wherein the network is an ad hoc network.
13. A method comprising:
detecting probe response packets associated with a network, the network including a first station and a second station; and
preventing data sent by the first station from reaching the second station by sending decoy packets corresponding to probe response packets, wherein a decoy packet to the first station includes a Basic Service Set Identifier (BSSID) of a first wireless network different from a BSSID of the network and a decoy packet to the second station includes a Basic Service Set Identifier (BSSID) of a second wireless network that is different from the BSSID of the network and the BSSID of the first wireless network.
14. The method as recited in claim 13 , wherein the network is an ad hoc network.
15. The method as recited in claim 13 , wherein the decoy packet comprises a timestamp set to a time ahead of current times of local timers in the first station and the second station.
16. A network security system comprising:
a local timer;
means for receiving wireless information;
means for determining whether the wireless information is wireless traffic associated with an ad hoc network; and
means for sending decoy information that places a source of the wireless information on a first wireless network and a destination for the wireless information on a second wireless network different than the first wireless network thereby preventing the wireless information from being directly transmitted between the source and the destination.
17. The network security system as recited in claim 16 , wherein the decoy information includes a timestamp that identifies a current time maintained by the local timer that remains ahead of timing for local timers at the source and at the destination.
18. The network security system as recited in claim 17 , wherein the decoy information is at least one beacon frame.
19. The network security system as recited in claim 18 , wherein the at least one beacon frame includes a destination being a network address of the source information, a Service Set Identifier (SSID) being the same SSID as a network including the source and the destination and a Basic Service Set Identifier (BSSID) assigned to the first wireless network that is different from the BSSID of the network.
20. The network security system as recited in claim 17 , wherein the decoy information is a probe response packet.