Preventing a memory attack to a wireless access point

Patent metadata

Field	Value
Publication number	US-10264013-B2
Application number	US-201314762181-A
Country	US
Kind code	B2
Filing date	Jan 18, 2013
Priority date	Jan 18, 2013
Publication date	Apr 16, 2019
Grant date	Apr 16, 2019

Abstract

Systems, methods, and machine-readable and executable instructions are provided for preventing a memory attack to a wireless access point (AP). Preventing a memory attack to a wireless access point can include receiving, with a wireless AP, a generic advertisement service (GAS) initial request from a querying station and transmitting, with the wireless AP, a GAS initial response to the querying station without querying an advertisement server based on the GAS initial request.

First claim

What is claimed:

1. A method of preventing a memory attack to a wireless access point (AP) comprising:
receiving, by the wireless AP, a generic advertisement service (GAS) initial request from a querying station;
allocating, by the wireless AP, an initial control block in a first stage memory queue for the GAS initial request;
transmitting, by the wireless AP, a GAS initial response including an indication of a comeback delay to the querying station without querying an advertisement server based on the GAS initial request;
receiving, by the wireless AP, a GAS comeback request from the querying station following the comeback delay;
moving, by the wireless AP, the initial control block from the first stage memory queue to a larger control block in a second stage memory queue in response to receiving the GAS comeback request from the querying station;
querying, by the wireless AP, the advertisement server based on receipt of the GAS comeback request from the querying station; and
transmitting, by the wireless AP, a GAS comeback response to the querying station.

2. The method of claim 1 , wherein the comeback delay is randomly generated within a range of comeback delays.

3. The method of claim 1 , wherein the method includes:
setting, by the wireless AP, the comeback delay associated with the GAS initial response; and
storing, by the wireless AP, the comeback delay and parameters of the GAS initial request including a media access control (MAC) address of the querying station, a dialog identifier, and a query type in the initial control block.

4. The method of claim 1 , wherein the method includes:
storing, by the wireless AP, a response from the advertisement server in the larger control block in the second stage memory, wherein the response from the advertisement server is based on the query from the wireless AP.

5. The method of claim 1 , wherein the method includes:
querying, by the wireless AP, the advertisement server based on query types stored in the first stage memory queue in response to the GAS comeback request received from the querying station complying with the comeback delay; and
dropping, by the wireless AP, the GAS comeback request from the querying station in response to the GAS comeback request not complying with the GAS comeback delay.

6. The method of claim 1 , wherein the method includes:
querying, by the wireless AP, the advertisement server based on the GAS initial request in response to the GAS comeback request received from the querying station complying with the comeback delay; and
dropping, by the wireless AP, the GAS comeback request from the querying station in response to the GAS comeback request not complying with the comeback delay.

7. The method of claim 6 , wherein dropping the GAS comeback request in response to the GAS comeback request not complying with the comeback delay includes dropping the GAS comeback request in response to the GAS comeback request being sent before expiration of the comeback delay.

8. The method of claim 1 , wherein the method includes:
setting, by the wireless AP, a first comeback delay for a first GAS comeback request associated with the querying station; and
setting, by the wireless AP, a second comeback delay for a second GAS comeback request associated with the querying station, wherein the first and the second comeback delays are different.

9. A non-transitory machine-readable medium storing instructions for preventing a memory attack to a wireless access point executable by a machine to cause the machine to:
store, in a shared memory queue, a first number of information elements received from an advertisement server in a response to a query on behalf of a first querying station;
store in the shared memory queue, a second number of information elements received from the advertisement server in response to a query on behalf of a second querying station that is different from the first number of information elements;
store a respective pointer to each of the first number of information elements in a first control block allocated to the first querying station; and
store a respective pointer to each of the second number of information elements in a second control block allocated to the second querying station, wherein the storage of the respective pointer to each of the first number of information elements in the first control block and the storage of the respective pointer to each of the second number of information elements in the second control block reduces an amount of memory used to store the first number of information elements and the second number of information elements for the wireless access point.

10. The medium of claim 9 , wherein the instructions are executable to update one of the first number of information elements stored in the shared memory queue according to a particular one of the second number of information elements that corresponds thereto.

11. The medium of claim 9 , wherein the instructions are executable to:
organize the shared memory queue as a doubly linked list, wherein each information element comprises a node in the doubly linked list including a type field, a content field, and a length field; and
update the content field of a particular node according to a later received information element.

12. The medium of claim 9 , wherein the first and the second numbers of information elements comprise access network query protocol (ANQP) information elements according to an IEEE 802.11u standard.

13. A wireless access point (AP), comprising:
a processing resource in communication with a memory resource, wherein the memory resource includes a set of instructions to prevent an attack to the wireless AP, executable by the processing resource to:
create a control block in a first memory queue in response to receiving a generic advertisement service (GAS) initial request from a querying station;
return a GAS initial response to the querying station with an indication of a first comeback delay;
store previously received information elements from an advertisement server in a second memory queue;
drop a first GAS comeback request in response to the querying station corresponding to the first GAS comeback request not having a control block in the first or the second memory queues;
drop a second GAS comeback request in response to the querying station corresponding to the second GAS comeback request having a control block in the first memory queue and in response to the second GAS comeback request not complying with the first comeback delay;
return a GAS comeback response including an information element from the second memory queue in response to a third comeback request from the querying station having a control block in the second memory queue and in response to the third comeback request complying with the first comeback delay; and
move a control block for the querying station from the first memory queue to the second memory queue, query the advertisement server, and return a GAS comeback response with an indication of a second comeback delay in response to a fourth comeback request from the querying station having a control block in the first memory queue and in response to the fourth comeback request complying with the first comeback delay.

14. The wireless AP of claim 13 , wherein the instructions are executable to:
randomly generate the first comeback delay within a range of comeback delays;
set a lifetime of the control block in the first memory queue; and
periodically check for expired control blocks.

15. A method of preventing a memory attack to a wireless access point (AP) comprising:
re

Assignees

• Hewlett Packard Entpr Dev Lp

Inventors

• Liu Yongqiang
• Li Shijian
• Xie Jun Qing
• Xu Xunteng

Classifications

• H04W84/12

  WLAN [Wireless Local Area Networks] · CPC title

• G06F16/951

  Indexing; Web crawling techniques · CPC title

• H04L63/1483

  service impersonation, e.g. phishing, pharming or web spoofing (detection of rogue wireless access points H04W12/12) · CPC title

• G06F17/30864

  Physics · mapped topic

• H04W12/08

  Access security · CPC title