Abstract: A method and apparatus for intrusion management in a wireless network uses distance measurement or location finding techniques to permit an administrator to manage security within a wireless network. A distance measurement or location-finding is performed between devices by transmitting and receiving one or more signals and computing an indication of physical location of a device attempting to connect or communicating within a wireless network. The resulting computed distance or location can be used to alert an administrator, provide a map of connected devices and/or automatically disconnect one or more suspect devices. Alternatively or in combination, changes in received signal amplitudes, time delays and/or other signal characteristics can be used to detect changes in the network due to intrusions.