Wi-Fi Fragment and Forge Detection (FFD)

Test Case Summaries

  • Test Cases: 20

 

Test Name

Synopsis

Cert-FFD-AP-001

Verify APUT rejects an A-MSDU frame with a valid LLC/SNAP header

Cert-FFD-AP-002

Verify APUT rejects an A-MSDU frame with a valid LLC/SNAP head in a malformed Data frame

Cert-FFD-AP-003

Verify APUT denies fragments encrypted under different keys and with non-consecutive Packet Numbers

Cert-FFD-AP-004

Verify APUT denies fragments encrypted under different keys and with consecutive Packet Numbers

Cert-FFD-AP-005

Verify APUT denies combination of cached fragment and a new fragment after reassociation

Cert-FFD-AP-006

Verify APUT denies combination of cached fragment and a new time-delayed fragment after reassociation with a time delay

Cert-FFD-AP-007

Verify APUT denies combination of cached fragment and an injected fragment after de-authentication and reconnection

Cert-FFD-AP-008

Verify APUT denies combination of cached fragment and a new time-delayed fragment after de-authentication and reconnection

Cert-FFD-AP-009

Verify APUT denies encrypted fragments with non-consecutive Packet Numbers

Cert-FFD-AP-010

Verify APUT denies a fragmented MSDU/MMPDU that includes an encrypted fragment followed by a plaintext fragment after a secure connection

Cert-FFD-AP-011

Verify APUT denies a fragmented MSDU/MMPDU that includes encrypted and plaintext fragments after a secure connection

Cert-FFD-AP-012

Verify APUT denies a fragmented MSDU/MMPDU that includes a plaintext fragment followed by an encrypted fragment after a secure connection

Cert-FFD-AP-013

Verify APUT denies a plaintext data frame after a secure connection

Cert-FFD-AP-014

Verify APUT denies a fragmented MSDU/MMPDU that includes multiple plaintext fragments after a secure connection

Cert-FFD-AP-015

Verify APUT denies fragment with a broadcast receiver address in a unicast frame after being connected

Cert-FFD-AP-016

Verify APUT denies fragment with a broadcast receiver address in a unicast frame during 4-way handshake

Cert-FFD-AP-017

Verify after a secure connection is successful, APUT denies A-MSDUs, with each containing an EAPOL subframe followed by a plaintext ICMP Echo request subframe

Cert-FFD-AP-018

Verify after a secure connection is successful, APUT denies A-MSDUs, with each containing a malformed EAPOL subframe followed by a plaintext ICMP Echo request subframe

Cert-FFD-AP-019

Verify during 4-way handshake, APUT denies A-MSDUs, with each containing an EAPOL subframe followed by a plaintext ICMP Echo request subframe

Cert-FFD-AP-020

Verify during 4-way handshake, APUT denies A-MSDUs, with each containing a malformed EAPOL subframe followed by a plaintext ICMP Echo request subframe