A lightweight agent-based egress NAC on wireless LAN

An egress Network Access Control (NAC) is widely deployed to control users in a wireless network. However, Medium Access Control (MAC) address spoofing is a technique that can easily bypass the egress NAC. So, this vulnerability is a big problem in almost all NAC systems around the world. To solve this problem, we proposeaVisa mechanism to enhance the egress NAC authentication. The mechanism needs only a JAVA applet to run without manually installing any agent-program. To evaluate our new mechanism, we have built a prototyped program, and experiment on a wireless test-bed. The performance evaluation has demonstrated favorable features of our new Visa mechanism.