Wifi Protector Battle Test: Protecting an ARP Table

Not so long ago, I conducted a comparative test of Android programs that prevent an attack on an ARP table . Then some users wanted me to test the Wifi Protector program , which did not fall into my review.
Finally, my hands reached her.



The success of the attack could be judged through the program itself.



Testing took place in exactly the same way as in the previous case.



The program can work in 2 modes. In the first mode, without root privileges. In this mode, the program periodically monitors existing records and displays a message about the attack if they change:

But nevertheless, about 5 seconds may elapse between the attack and the reaction of the program. Then the records are restored.




If the device has root access, then the situation changes. It seems that the created records are registered statically and there is no way to change them even for seconds. In this mode, the program does not give alerts about attack attempts.











Summing up, I can say that this program, according to the test results, coped with protection best. But she is worth the money (albeit small). The only unpleasant residue from working with it is a false alarm when switching from one access point to another:

This is due to the incorrect logic of the program: it monitors the change in the BSSID (also known as the MAC address) of the access point and, when it changes, signals an otak, assuming that the attacker is trying to switch the device to his access point. But at the same time, the SSID (network name) is not monitored at all. In the given case, it was like this: I just switched from one network to another and received a false message about the attack.

In general, use it wisely