Intrusion detection for 802.11 networks

"Wireless LAN technology provides freedom and flexibility to the Local Area Network. The current standards based (IEEE 802.11) wireless LAN equipment is intended to provide reliable coverage over a limited range of approximately 100m. However, the wirelessLAN transmissions may be detected and exploited at much greater ranges, and can provide an intruder with the opportunity to attack the network from a remote site, outside the secured facility. Existing Network Intrusion Detection Systems (NIDS) can providetools for determining if a network attack is occurring, but they do not provide the system administrator with information about the attackers location. By exploiting in-depth knowledge of the 802.11 Rake Receiver and wireless channel models, it is possibleto characterize wireless clients that are beyond the range of intended coverage. Anntron proposes to evaluate existing NIDSs for military environments. Using in-depth knowledge of 802.11 Rake Receiver and channel models, Anntron will create simulations ofrange estimation using standard 802.11 access point attributes. Anntron will then develop an Intelligent Agent to provide the system administrator with early, spatial information regarding the attack. Anntron will also evaluate using its' own patentpending wireless LAN multi-beam antenna technology to provide additional location information. Modeling and simulations will provide a means of predicting intruder range based on access