Malware in IEEE 802.11 Wireless Networks

Malicious software (malware) is one of the largest threats facing the Internet today. In recent years, malware has proliferated into wireless LANs as these networks have grown in popularity and prevalence. Yet the actual effects of malware-related network traffic in open wireless networks has never been examined. In this paper, we provide the first study to quantify the characteristics of malware on wireless LANs. We use data collected from the large wireless LAN deployment at the 67th IETF meeting in San Diego, California as a case study. The measurements in this paper demonstrate that even a single infected host can have a dramatic impact on the performance of a wireless network.

[1]  Christopher Krügel,et al.  Behavior-based Spyware Detection , 2006, USENIX Security Symposium.

[2]  David Kotz,et al.  Analysis of a Campus-Wide Wireless Network , 2002, MobiCom '02.

[3]  Stefan Savage,et al.  Automating cross-layer diagnosis of enterprise wireless networks , 2007, SIGCOMM.

[4]  Ratul Mahajan,et al.  Measurement-based characterization of 802.11 in a hotspot setting , 2005, E-WIND '05.

[5]  Martin Heusse,et al.  Performance anomaly of 802.11b , 2003, IEEE INFOCOM 2003. Twenty-second Annual Joint Conference of the IEEE Computer and Communications Societies (IEEE Cat. No.03CH37428).

[6]  David Schwab,et al.  Characterising the use of a campus wireless network , 2004, IEEE INFOCOM 2004.

[7]  Kevin A. Kwiat,et al.  Modeling the spread of active worms , 2003, IEEE INFOCOM 2003. Twenty-second Annual Joint Conference of the IEEE Computer and Communications Societies (IEEE Cat. No.03CH37428).

[8]  Songwu Lu,et al.  Characterizing flows in large wireless data networks , 2004, MobiCom '04.

[9]  Vinod Yegneswaran,et al.  BotHunter: Detecting Malware Infection Through IDS-Driven Dialog Correlation , 2007, USENIX Security Symposium.

[10]  Kevin C. Almeroth,et al.  Understanding congestion in IEEE 802.11b wireless networks , 2005, IMC '05.

[11]  Walied E. Hassan.  Characterizing User Behavior and Network Performance in a Public Wireless LAN , 2003 .

[12]  G. CN5MOP946Q,et al.  Characterizing user behavior and network performance in a public wireless lan , .

[13]  R. Chandra,et al.  WiFiProfiler: cooperative diagnosis in wireless LANs , 2006, MobiSys '06.

[14]  Stefan Savage,et al.  Inferring Internet denial-of-service activity , 2001, TOCS.