Abstract: A method for preventing an attack for wireless local area network devices is applied in a wireless local area network. The wireless local area network includes a access point and a mobile station. The method includes generating fake media access control (MAC) addresses by the access point; transmitting the fake MAC address to the mobile station by the access point; identifying whether frames to be sent by the access point and the mobile stations are encrypted or not; if the frames are not encrypted; setting address fields of the unencrypted frames to the fake MAC addresses of the mobile station and the access point.

Abstract: A method for identifying management frames includes: receiving a management frame; determining a new state according to the management frame; transmitting a class frame to an expected source device according to the new state, wherein a class of the class frame is higher than that of a frame corresponding to the new state; determining whether an expected frame is received, wherein a type of the expected frame is the same as that of the management frame; and determining that the management frame is a true frame transmitted from the expected source device if the expected frame is received. A device employing the method is also provided.

Abstract: A system for identifying an access point is provided, the system arranged in a mobile station associated with the access point. The system includes a detecting module, a controlling module, a determining module, and an identifying module. The detecting module detects a beacon from the access point. The controlling module controls a connection status between the mobile station and the access point. The determining module determines whether the number of the mobile stations associated with the access point varies with changes in the connection status. The identifying module identifies a status of the access point based on a determination result. A method for identifying an access point is also provided.

Abstract: A mobile station (300) for making access points enter protection modes includes a scanning module (310), a dummy module (320), and a dummy access point (330). The scanning module scans an access point (10) not entering a protection mode. The dummy module produces the dummy access point. The dummy access point includes a data producing module (331), an interval setting module (332), and a transmitting module (333). The data producing module produces a beacon frame for triggering the access point to enter a protection mode. The interval setting module sets a beacon interval. The transmitting module broadcasts the beacon frame during each beacon interval. A method for making access points enter protection modes is also provided.

Abstract: An access point (100), for determining whether the access point and a plurality of other access points within the scope of the access point support the same pre-shared key (PSK), includes a dummy module (110) and a dummy mobile station (120). The dummy mobile station is produced by the dummy module, and includes an authentication submodule (121), an association submodule (122), and a handshake submodule (123). The authentication submodule authenticates the plurality of other access points. The association submodule associates with the plurality of other access points. The handshake submodule runs 4-way handshakes with the plurality of other access points, and determines whether any of the plurality of other access points and the access point support the same PSK. A method for identifying PSKs thereof is also provided.

Abstract: A method for numbering a plurality of frames with sequence numbers is implemented in a wireless network device having a plurality of data units, and includes the steps of: providing receiver addresses of the data units; and numbering each data unit with a respective sequence number according to the receiver address of the data unit. A WLAN device employing the method is also disclosed for avoiding denial of service (DoS) attacks and man-in-the-middle attacks.

Abstract: A channel scanning device (100) for scanning channel status of a wireless local area network (WLAN) is provided. The channel scanning device includes a status recording module (120), a transmission module (130), and a probing module (140). The status recording module is used for setting up a channel status list including multiple sequence fields and status fields, the sequence fields representing a channel sequence, and one sequence field together with a status field corresponding to each channel. The probing module is used for pre-probing the channel according to the channel sequence, in order to find an idle channel, probing the idle channel, and recording the channel status into the channel status list set up by the status recording module. The transmission module is used for transmitting a pre-probe packet over the idle channel. A channel scanning method for scanning channel status of the WLAN is also disclosed.

Abstract: A channel switch method is applied in a wireless communication system. The wireless communication system includes an access point and a plurality of mobile stations. The access point communicates with the plurality of mobile stations on a shared channel. The channel switch method includes transmitting a request frame from a first mobile station to the access point for a channel switch service; transmitting a channel switch frame from the access point to the first mobile station to switch the first mobile station from the shared channel to a new channel; and transmitting a beacon frame to the new channel and the shared channel.

Abstract: A method for detecting attacks in a power save mode includes providing a mobile station and an access point; entering a power save mode by the mobile station; producing a dummy mobile station by the mobile station, and initiating the dummy mobile station to communicate with the access point; producing mock data and transmitting the mock data from the dummy mobile station to the mobile station via the access point; and determining whether the mock data is saved in the access point to detect whether there is an attack. A mobile station employing the method is also provided.

Abstract: A method for transmitting information of a mobile station through a wireless local area network (WLAN) is provided. The WLAN includes a plurality of access points and a plurality of mobile stations, and is coupled to a management server. One mobile station communicates with one of the access points by management frames, and the access point communicates with the management server by packets. The method includes the steps of: adding an information element (IE) for storing information of the mobile station to a management frame by the mobile station; transmitting the management frame with the IE from the mobile station to the access point; adding content of the IE to a packet by the access point; and transmitting the packet from the access point to the management server.

Abstract: A method for increasing security of plaintext authentication in a wireless local area network (WLAN) is provided. The method includes steps of: establishing a basic server set in the WLAN; establishing a blank learning table for saving identities of the faked users; generating identities to the faked users; performing a faked extensible authentication protocol process according to the generated identities; determining whether the learning table should be updated; and updating the learning table if the learning table should be updated.