Software Implementation of Intrusion Detector Software for Wireless ISPS (A Case Study of Federal Polytechnic Nekede Owerri ISPS)

1.0 Introduction
Threats to wireless local area networks (WLANs) are numerous and potentially devastating. Security issues ranging from mis-configured wireless access points (WAPs) to session hijacking to Denial of Service (DoS) can plague a WLAN. Wireless networks are not only susceptible to TCP/IP-based attacks native to wired networks, they are also subject to a wide array of 802.11-specific threats.
To aid in the defense and detection of these potential threats, WLANs should employ a security solution that includes an intrusion detection system (IDS). Even organizations without a WLAN are at risk of wireless threats and should consider an IDS solution. This paper will describe the need for wireless intrusion detection, provide an explanation of wireless intrusion detection systems, and identify the benefits and drawbacks of a wireless intrusion detection solution.

1.1 Background Of Study
Federal Polytechnic Nekede Owerri Internet Service Provider is chosen as the background of study for the project.
Among the great organization and big institution is Federal Polytechnic Nekede Owerri, a tertiary institution with several employees working in the different department to achieve the set out objective of educating the human person. By edict No. 16 of 1978, the college of Technology, Owerri was established.
It opened for classes on 15th December, 1978 at a temporary site in the premises of the government trade centre, along Egbu Road Owerri, with an initial in-take of 275 students. In October, 1980, the college moved to its permanent site at Nekede near Owerri, by which time the college had grown to 1,350. The name of the college was later changed to the Polytechnic, Nekede, Owerri by Federal Amendment of Decree 1993 of 1st January, 1993.
The Federal polytechnic is at present organized into the schools of:

1. Business Administration and Management Technology which offers courses such as Accountancy, Public Administration, Banking/Finance etc.
2. Engineering Technology which offers courses such as Mechanical engineering, Civil engineering, Computer science etc.
3. Environmental design which offers courses like building technology, architectural etc.
4. Industrial sciences which offers courses like science technology, food technology etc.
5. General studies which offers courses like Mathematics, Statistics, humanities etc.

Each of the above mentioned schools is headed by a Dean and all the schools have department also headed by a HOD (head of department). The non-academic divisions and units' include the registry, bursary, works, medical and health services and the student's affairs. The units are:
Security, internal audit and public relations which are however, housed under the office of the rectory.

1.2 Objective Of The Study
The main objective of this work is to design automated software that will aid in the total elimination of intruders from gaining access to the hiding information in our various sysems.
The objective of the study focuses on the following:

1. To aid in monitoring and controlling of fraudulent.
2. To provide quick enquiry about information in an organization.

Furthermore, the study will show the effect in the manpower of the security department because on most occasions charging the manual information system to an automated information system will equally cause redundancy.

1.3 Statement Of Problem
There are difficulties experienced in the manual system or intrusion detection in an organization. These factors therefore necessitate the implementation of a computer — base system in other to overcome the short comings of the manual system of detecting intrusion. By automating the system, rate of intrude flow will be eliminated in an organization, equally the statement of the problem of the work is also be:

1. To understand what intrude is all about and solutions to stop it in entirely.
2. To make an effective security on all the functional inputs of the organization.
3. To bring a seasonal programmer and an operator who will be taking charge of the intrusion detector software being developed.

1.4 Scope Of The Study
This project work focus mainly on the intrusion detector software for wireless ISPs and also provides well developed software to automate the new system.

1.5 Limitation Of Study
The research of this work is limited Federal Polytechnic Nekede Owerri, ISPs.
Many limitations were encountered during the process of gathering the information for the development of this project work to this extent.
It was not an easy one, so many constraints was encountered during the collection of data.
The limitation focuses on the following constraints:
Financial constraints:
The cost of sourcing for information and data that are involved in this work is high in the sense that we all know that information is money.
Time:
A lot of time was involved in writing and developing this work.

1.5 Purpose Of The Study
The primary purpose of a WISP is to prevent unauthorized network access to local area networks and other information assets by wireless devices. These systems are typically implemented as an overlay to an existing Wireless LAN infrastructure, although they may be deployed standalone to enforce no-wireless policies within an organization. Some advanced wireless infrastructure has integrated WISP capabilities.
Large organizations with many employees are particularly vulnerable to security breaches[1] caused by rogue access points. If an employee (trusted entity) in a location brings in an easily available wireless router, the entire network can be exposed to anyone within range of the signals.
In July 2009, the PCI Security Standards Council published wireless guidelines[2] for PCI DSS recommending the use of WISP to automate wireless scanning for large organizations.

1.6 Significance Of Study
The Intrusion Detector Software for wireless ISPs would lead to an effective and comprehensive intrusion control in an organization. For examples, computerized verification of illegal access of customers e-mail, computerized verification of signatures. In a matter of seconds the computer system enhanced to do all these tasks, then all criminal and inrusion minded people will desist from such acts.

1.7 Definition Of Terms
Intrusion:
Is defined as deception deliberately practiced with a view of gaining an unlawful or unfair advantage.
Economic Crime:
This is the manifestation of criminal act done either solely or in an organized manner with or without associates or group with the propose earning wealth or being rich through all illegal means.
Identity Theft:
This is an action that proceeds enable a intrusion to occur.
False Billing Fraud:
This occurs when a business or an individual receives a bill for a product whereby the representation of the product by the promoter was either false or misleading or whereby the product were either never ordered or received.
Internet Intrusion / Fraud:
This refers generally to any type of fraud scheme that uses one or more components of the internet such as chat room, e-mail, message boards or websites to present fraudulent transactions or to transmit the proceed of fraud into in financial institutions or to others connected with the scheme.
Password:
This is a measure of protection against intruders from gaining access to the documents and secretes information.
System Investigation:
This is an in-depth and study of an existing system with regard to its producers in working out an improved system.
Research Methodology:
This is an investigation undertaking in order to discover new factors through planning and systematic collection, analysis and interpretation of data. -Direct Personal Observation:
Involves the means of watching people, events and obtaining a lot of first hand information relating to the people concerned.
Personal Interview:
This is a means of which information needed are source directly, by interviewing people who are going to use the system.
Questionnaire:
This is the most method of data collection and is advisable for collecting answers to research questions.
System Analysis:
Is defined as the study of a system to access the feasibility of proposed information system and to determine how it should function.
Input Design:
The input refers to the data that is supplied to the system for it is to process and produce information.
Output Design:
The output form the system refers to the information that is gotten from the system.
Algorithm:
Is defined as a description of a procedure which terminates with a result.
Flow Chart:
Is a diagrammatic representation of the sequence of steps involved in carrying out a process.
Debugging:
Is defined as the process of locating and fixing error (know as bugs) in a computer program or hardware device.
Coding:
Is defined as the representation the algorithms written for a particular task with the aid of a high level language that help to translate a simple code to machine code and produce the minimum output needed.
Test-Run:
This is an exercise that puts a machine, process or system through a series of actions to ascertain its current status or to verify its reliability to ask.
Documentation:
It is an important part of implementation process. It serves as a method of communication among the people responsible for developing.
Implementation:
This enable programmer to work modules in parallel and periodic testing and check on performance of the whole system allowed manageable growth in complexity without introducing untraceable bugs.
Maintenance:
This is the change in hardware, software and documentation or procedures to a production system in order to correct error or anomalies, meet new requirements or improve efficiency.
Corrective Maintenance:
This is identification and removal of errors or failures in the system.
Preventive Maintenance:
This hooks or regular inspection or periodic monitoring of the system to detect frauds as such invokes maintenance in such area so as to forestall bridges in the operation of the system.