Intrusion detection for 802.11 networks

"Existing WLAN security has been incomplete in the commercial and government sector, focusing primarily on encryption, authentication, and wireless VPNs. The comprehensive security solution requires the addition of several key functions which includenetwork vulnerability assessment, identification and characterization of new and emerging intrusion threats, identification and location of rogue APs, WLAN protection from intruders and attacks, and the development of proactive WLAN security managementpolicies. In order to effectively protect WLAN infrastructures, a comprehensive, multi-faceted Wireless Intrusion Detection Security and Management System (WIDSMS) must be developed. The WIDSMS will discover known, and unknown WLAN network vulnerabilitiesand unauthorized devices, send alerts, assess the extent of the intrusion or violation, effect elimination of unauthorized wireless connections, and provide overall WLAN network management functions to monitor network performance, dynamic connections andhistory, and to enforce reactive wireless network policies. To complete the WIDSMS solution functionality with wired network VPN solutions, the AP must also establish plug-and-play virtual communications path between its wired connection on the backboneto the VPN concentrator in order to provide encrypted access from the wireless client all the way through the VPN tunnel before allowing access to the wired resources. The Wirelesss Intrusio