Method and system for wireless attack detection and mitigation

摘要

A method and system for detection and mitigation of attacks on a wireless network. The wireless network includes a plurality of antennas that are associated with different directions of coverage. The antennas can include an antenna array or an antenna having beamforming capabilities. An intrusion prevention processor or device analyzes incoming signals and determines individual device or aggregate device behavior patterns. The behavior patterns are compared with known attack patterns or triggers to determine if an anomaly has occurred. Attacking signals are blocked, or antennas in the direction of the anomaly are disabled while the system stabilizes. If the system stabilizes and the anomaly clears, the antennas are enabled and monitoring continues.