Refocusing in 802.11 Wireless Measurement
[deshpande:refocusing]Udayan Deshpande, Chris McDonald, and David Kotz. Refocusing in 802.11 Wireless Measurement. Proceedings of the Passive and Active Measurement Conference (PAM 2008), volume 4979 in Lecture Notes in Computer Science, pages 142–151. Springer-Verlag, April 2008. doi:10.1007/978-3-540-79232-1_15. ©Copyright Springer-Verlag.
The edge of the Internet is increasingly wireless. To understand the Internet, one must understand the edge, and yet the measurement of wireless networks poses many new challenges. IEEE 802.11 networks support multiple wireless channels and any monitoring technique involves capturing traffic on each of these channels to gather a representative sample of frames from the network. We call this procedure channel sampling, in which each sniffer visits each channel periodically, resulting in a sample of the traffic on each of the channels.
This sampling approach may be sufficient, for example, for a system administrator or anomaly detection module to observe some unusual behavior in the network. Once an anomaly is detected, however, the administrator may require a more extensive traffic sample, or need to identify the location of an offending device.
We propose a method to allow measurement applications to dynamically modify the sampling strategy, refocusing the monitoring system to pay more attention to certain types of traffic than others. In this paper we show that refocusing is a necessary and promising new technique for wireless measurement.
Citable with [BibTeX]
Keywords: [security] [wifi]
Available from the publisher: [DOI]
Available from the author:
The publisher does not allow us to post a pdf copy; contact me if you are unable to obtain a copy from the publisher.