Intrusion detection for 802.11 networks

This Phase II proposal outlines the development plan, including implementation, prototyping, and demonstration of a Wireless Intrusion Detection and Security Management Solution (WIDSMS) to provide early warning and directional indication of intrusion attempts to the protected wireless network, assessment of the threat or RF anomaly, recommended response actions in the form of operator notification, and optionally, automated intrusion prevention actions to safeguard the wireless network. Phase II work will build upon the architecture and proof-of-concept from Phase I. Development will focus on the two main WIDSMS subsystems which work together to detect and locate intruding signals before the rogue system is able to exchange data with the protected wireless network, and to provide recommended or automated intrusion prevention actions. These two major subsystems include: (1) Packet-based software intrusion detection and prevention component. (2) Smart antenna null-steering component. It will be shown in this proposal that WIDSMS is capable of filling a crucial gap in the military and throughout industry by providing a protected "invisible fence" around mission-critical wireless networks.