Abstract:

Nowadays wireless intrusion prevention systems have become the research hotspot with the fast development of WLAN. In this paper，we first introduce the common attack methods for WLAN，and then present the framework of the wireless IPS with a distributed pre-decision engine，which can predict the future actions and direct active responses to these actions. We implement an improved model with extended detection rules for conducting intrusion plan and making pre-decision，by gathering wireless device information and importing supporting degree of intrusion plan in plan recognition. Experimental results showed that the distributed pre-decision engine can not only improve wireless intrusion detection and prevention performance，also reduce false negatives and false positives evidently.

Key words: intrusion prevention system, plan recognition, detection rule, network security