An Intelligent WLAN Intrusion Prevention System Based on Signature Detection and Plan Recognition

WLAN intrusion prevention systems have recently become one of the research hotspots with the rapid development of wireless communication. This paper starts from the introduction of intrusion prevention system and security threats to WLAN, puts forward the framework of the wireless IPS with an intelligent plan recognition engine, especially illustrates the expanding description of signature detection rules and the process of plan recognition. By utilizing device information and happened attack plans on monitored WLAN, this engine can predict the future actions and direct active responses to these actions. We present an improved model for conducting plan recognition. Experimental results showed that this engine can not only detect and prevent the main wireless attacks but also decrease false positives.