Evil-Twin Detection on Client-side

Client-side rogue access-point detection using a simple walking strategy and round-trip time analysis

“…Conversely, by implementing user-side detection with existing wireless NICs [24][25][26][27][28], statistical analysis of captured frames may be more suitable for detection, particularly for type 3 rogue-APs.…”

“…Furthermore, in [24], to detect evil-twin APs (rogue-APs), the relationship between RTT and MCS was preliminary studied. However, the focus was only on the effect of the average MCS and delay; further, the evaluation was performed only by simulation, with restricted coverage area of the rogue-AP.…”

“…Then, the CDF analysis consists of sorting and array search with the O(n log n + 1) . Hence, the total running time is O(2 × 2 3 (5n) × 5 + n log n + 1) ≈ O(n log n) Previous client-side rogue-detection techniques [24,[27][28][29] were compared with the proposed mechanism, as shown in Table 2. For Yang et al [29], the calculation is based on n data points and involves determining the argument of the minimum (argmin).…”

“…In Kitisriworapan et al [24], in n walking steps, the highest MCS and RTT are determined with a complexity of O(n(2n log n)) , followed by MCS searching involving different RTT, with a complexity of O(n) . The running time is therefore O(n(2n log n) + n) ≈ O(n 2 log n).…”