Security Management of WLANs in Streaming Overlays 學生 : 黃立恆 林世國 指導教授 : 林華君

2 Security Threats of WLANs in Streaming Overlays Internet Streaming server Rogue AP  DoS/DDoS  IP/MAC spoofing  Eavesdropping  Data alteration Rogue AP  DoS/DDoS  IP/MAC spoofing  Eavesdropping  Data alteration AP

3 Purposes Detect rogue mobile devices Find the location of rogue mobile devices Streaming Server 1 Rogue AP AP Internet Streaming Server 2 AP Snooper 3 Snooper 1 Snooper 2 Detection and localization server

4 Detect Rogue Mobile Devices White list Legal Devices ： MAC address in the White List Rogue Devices ： MAC address not in the White List

5 Find the Location of Rogue Devices Location Systems Types of location systems Snooper-based Location System Need snoopers Client-based Location System

6 Location Syetems (1/2) Two phases of a snooper-based location system ： Training phase Training Set Location Estimation Phase Computation and use location algorithms

7 Location Syetems (2/2) Techniques of location systems ： Radio Propagation Model Lateration triangulation Average error distance ： 4~5 m Static Scene Analysis K-Nearest Neighbors Simple Point Matching Bayesian Inference Conditional Probability Average error distance ： 2~3 m

8 Architecture of 0ur Location System Rogue AP Snooper 4 Snooper 6 Snooper 2 Detection and localization server Snooper 1 Snooper 5 Snooper 3 Switch

9 Components of our Location System Snoopers Receive signal strength Send information to server Training machine Send packets → Training set Detection and Localization server Computation and analysis Detection Location

10 Progress Setup of snoopers (completed) Software for snoopers (completed) Software for training machine (completed) Training Software for detection Software for localization Fine tuning