TL;DR
This paper demonstrates vulnerabilities in WPA3 Wi-Fi networks through real attacks, and proposes a signature-based intrusion detection system that successfully detects all tested attacks, enhancing Wi-Fi security.
Contribution
It introduces a novel signature-based IDS tailored for WPA3 networks, capable of detecting multiple known attacks, and provides open-source tools for research and testing.
Findings
AP vulnerable to 8 out of 9 attacks
IDS failed to detect any attacks initially
Proposed IDS detects all tested attacks successfully
Abstract
Wi-Fi (802.11) networks have become an essential part of our daily lives; hence, their security is of utmost importance. However, Wi-Fi Protected Access 3 (WPA3), the latest security certification for 802.11 standards, has recently been shown to be vulnerable to several attacks. In this paper, we first describe the attacks on WPA3 networks that have been reported in prior work; additionally, we show that a deauthentication attack and a beacon flood attack, known to be possible on a WPA2 network, are still possible with WPA3. We launch and test all the above (a total of nine) attacks using a testbed that contains an enterprise Access Point (AP) and Intrusion Detection System (IDS). Our experimental results show that the AP is vulnerable to eight out of the nine attacks and the IDS is unable to detect any of them. We propose a design for a signature-based IDS, which incorporates…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Code & Models
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
