The Intrusion Detection and Recovery of Deauthentication Frame In WPA3 SAE

Abstract

As wireless communication technologies advance, protecting networks from emerging threats becomes increasingly important. This paper focuses on deauthentication detection and recovery in the context of WPA3 SAE (WIFI Protected Access 3 - Simultaneous Authentication of Equals), a widely used protocol for securing wireless networks. Deauthentication attacks, which forcibly disconnect legitimate users, seriously threaten the integrity and availability of network services. The primary contributions of this paper center on developing a robust detection method for distinguishing between normal network behavior and deauthentication attack activities. also delves into the design and implementation of proactive recovery mechanisms that allow for the rapid restoration of network services following a deauthentication attack. The observed results indicate that there is a significant and immediate impact on network functionality during an active authentication attack. One noticeable consequence is preventing new customers from successfully joining the network. Another consequence is that the increased number of EAPOL frames is the result of unresponsive client behavior. And the AP's attempt to complete the handshake.