Abstract: The invention relates to a method, device and program for detection of address spoofing in a wireless network. According to the invention, a sensor is installed in order to capture frames transmitted over the wireless network which have an address field comprising an address of a network access point. The captured frames are analyzed in order to establish a list of stations that are associated with the access point. Another list of stations associated with the access point is obtained from the latter. The two station lists are compared in order to detect possible access point address spoofing.

Abstract: This method of detecting address spoofing in a wireless network, comprising the steps of obtaining frames comprising an address of a device having sent the frame and a timestamp representative of the time of sending of the frame by said device; of analyzing the timestamps included in the frames having one and the same sending device address; and of detecting a spoofing of said address according to the analysis of said timestamps.

Abstract: A method is provided whereby management frames, transmitted over the wireless network and comprising each an address of a frame transmitter and a frame body containing a plurality of information fields are obtained. Some of the information fields contained in the frame body of several management frames obtained successively and having the same transmitter address are analyzed so as to trigger an alarm in case of detected variation in said information fields.

Abstract: The management frame protection method comprises, for the first management frame (7, 8, 9, 10) sent by a first equipment and received by a second equipment, a step of inserting in said first management frame (7, 8, 9, 10) a parameter f(X0) that is an image of a predetermined numerical value X0 as obtained by a mathematical function f that is difficult to invert and that is known to both equipments, and for each kth management frame (7, 8, 9, 10) sent by the first equipment and received by the second equipment: a step of inserting in said kth management frame (7, 8, 9, 10) a parameter f(Xk) that is the image of a numerical value Xk as obtained by the mathematical function f, and a numerical value Xk?1 that was used to determine a parameter f(Xk?1) inserted in a (k?1)th management frame (3, 4, 5, 6); and a step of the second equipment comparing an image of the numerical value Xk?1 as obtained by the function f as received in the kth management frame (7, 8, 9, 10) with the parameter f(Xk?1) received in the k?