Wireless network security system
A wireless network security system with a plurality of communication terminals including an Access Point (AP) and a station is provided. The wireless network security system includes a plurality of sensor devices for collecting identification information of the communication terminals, and a WIPS server communicating with the sensor devices, for transmitting a control signal to the communication terminals, wherein the WIPS server transmits the control signal to the plurality of communication terminals through the sensor devices, and when a control signal for blocking connection of two or more communication terminals among the plurality of communication terminals associated through a network is transmitted, connection blockage packets different from one another is created and sequentially and repeatedly transmitted.
1. A wireless network security system provided with a plurality of communication terminals including Access Points (APs) and stations, the system comprising:
a plurality of sensor devices configured to collect identification information of the communication terminals; and
a Wireless Intrusion Prevention System (WIPS) server configured to communicate with the sensor devices, and to transmit a control signal to the communication terminals,
wherein the WIPS server transmits the control signal to the plurality of communication terminals through the sensor devices, and when a control signal for blocking connection of two or more communication terminals among the plurality of communication terminals connected through a network is transmitted, at least a first connection blockage packet corresponding to a first category and at least a second connection blockage packet corresponding to a second category are created and sequentially and repeatedly transmitted,
wherein the first connection blockage packet contains information on Basic Service Set Identifier (BSSID) of a target communication terminal among the communication terminals and information on a command for blocking connection between the target communication terminal and other communication terminals connected to the target communication terminal, and
wherein the second connection blockage packet contains the information on Basic Service Set Identifier (BSSID) of the target communication terminal among the communication terminals, identification information of one or more specified communication terminals connected to the target communication terminal, and information on a command for blocking connection between the target communication terminal and the specified communication terminals.
2. The system according to claim 1 , wherein the second connection blockage packet is one of a 2-1 connection blockage packet for requesting blockage of connection from an AP to a station, and a 2-2 connection blockage packet for requesting blockage of connection from a station to an AP.
3. The system according to claim 2 , wherein the WIPS server sequentially and repeatedly transmits the first connection blockage packet, a 2-1 connection blockage packet and a 2-2 connection blockage packet through the sensor device.
4. The system according to claim 1 , wherein the first connection blockage packet is propagated in a broadcast method, and the second connection blockage packet is propagated in a unicast or multicast method.