AT TOPPaper 272 US-W-JDOWN
Physical Layer Intrusion Detection in Wireless Networks
Tomko,A. A.JHU/APL
Rieser,C. J. JHU/APL
Buell,L. H.JHU/APL
This paper describes a method for detecting intrusions in wireless networks based on physical layer features extracted from the radio frequency (RF) waveform of individual network packets. The features considered include those intrinsic to the packet source (wireless user node), as well as those related to the propagation path between the source and a network access point. It is shown that a sequence of RF features can be used to uniquely identify each packet source in a network, thereby providing a mechanism for identifying rogue node activity, such as a spoofing attack. Empirical results are presented for an IEEE 802.11b network.

Dr. Al Tomko is a member of the Principle Professional Staff at The Johns Hopkins University Applied Physics Laboratory (JHU/APL). He holds a MS in Physics and a PhD in Electrical Engineering from The Pennsylvania State University. Dr. Tomko's areas of interest include antennas, radiowave propagation, wireless networks and ionospheric physics. He is a member of the IEEE and the American Geophysical Union. Prior to joining the staff of JHU/APL, Dr. Tomko worked as a research engineer at the IIT Research Institute, Lanham, MD and the Joint Spectrum Center, Annapolis, MD.