AP Apparatus and Method for Detecting Rogue AP

摘要

A rogue AP detecting apparatus may comprise: a communication unit receiving beacon frames from a plurality of normal APs positioned within a predetermined distance from a user terminal; a frequency difference probability value calculation unit calculating a frequency difference probability value with respect to a first AP by using frequency differences between a beacon frame of the first AP included in the plurality of normal Aps and beacon frames of the remaining APs; and a rogue AP determination unit determining whether a second AP is a rogue AP by using the frequency difference probability value of the first AP having the same identification information as that of the second AP which is an access target of the user terminal. An apparatus and a method for detecting a rogue AP according to the present invention can previously analyze beacon frame frequencies of the plurality of normal APs positioned near the user terminal and use the analysis result in determining whether the AP to be accessed is a rogue AP. The present invention can determine and detect whether to be a rogue AP or not in real time by using the analysis result. In addition, the present invention calculates the beacon frame frequency difference to detect the rogue AP, thereby being capable of easily detecting the rogue AP without arranging separate hardware besides the user terminal or correcting an AP protocol.