<![CDATA[Standard wireless networks have a fundamental vulnerability in unencrypted management frame transmissions, making them susceptible to Deauthentication and Authentication Flood attacks. Commercial intrusion detection solutions are often expensive and complex for Small Office/Home Office (SOHO) environments. This research aims to design a low-cost Wireless Intrusion Detection System (WIDS) prototype based on the ESP32 microcontroller to detect management frame anomalies. The detection method utilizes a static threshold alongside Promiscuous Mode to passively capture packets. A channel hopping mechanism is implemented across 13 channels in the 2.4 GHz spectrum with a 400-millisecond interval. Attack alerts are transmitted via the MQTT protocol to a Node-RED dashboard for real-time visualization. Testing results demonstrate that the system successfully detects four types of flooding attacks (Deauthentication, Disassociation, Authentication, and Probe Request) with an average accuracy of 78.5%. The system also features a 20-slot Ring Buffer Queue to prevent log loss during temporary connection drops (Micro-Blindness). Furthermore, applying Static IP and BSSID binding successfully reduced connection recovery time from 3000 ms to under 400 ms. In conclusion, the ESP32-based WIDS proves to be an effective, functional, and efficient first-line defense for SOHO environments.]]>
Copyrights © 2026
