What types of attack detection are supported over the air interface?

Huawei's Wireless Intrusion Detection System (WIDS) and Wireless Intrusion Prevention System (WIPS) provide comprehensive security for the air interface. These systems are designed to detect and mitigate a wide range of wireless attacks. This includes Denial-of-Service (DoS) attacks like management frame flooding (A), impersonation attacks such as MAC spoofing (B), attacks on legacy encryption protocols like WEP weak IV detection (C), and attempts to compromise access credentials through brute-force PSK cracking (D). All listed options represent standard attack vectors that modern enterprise-grade WLAN security solutions, including Huawei's, are equipped to identify over the air.

All the provided options are correct; therefore, this section is not applicable.

1. Huawei WLAN AC V200R019C10 Product Documentation, WLAN Security Feature Description, Section: WIDS and WIPS.

This official document provides a table titled "WIDS attack types" which explicitly lists the following detectable attacks:

Flood attack: "Broadcast deauthentication/disassociation flood attack", "Probe request flood attack", "Association request flood attack". (Supports option A)

Spoofing attack: "Spoofed management frame detection", "AP spoofing detection". (Supports option B)

Weak IV attack: "Weak IV detection". (Supports option C)

Brute force PSK cracking: "WPA/WPA2 PSK cracking detection". (Supports option D)

2. Stallings, W. (2017). Cryptography and Network Security: Principles and Practice (7th ed.). Pearson.

Chapter 18, "Wireless Network Security," describes the vulnerabilities and attack vectors for IEEE 802.11 networks. It details DoS attacks (flooding), spoofing, WEP vulnerabilities (including weak IVs), and attacks against WPA/WPA2-PSK, confirming these are standard, detectable threats in a wireless environment.

3. Purdue University, ECE 695, Wireless Security Courseware, Lecture on "WLAN Security and Attacks".

Course materials typically cover the operational principles of WIDS/WIPS. Lectures on this topic detail the signature and anomaly-based detection of common 802.11 attacks, including management frame floods, MAC spoofing, WEP cracking via weak IVs, and dictionary/brute-force attacks on PSK, aligning with the capabilities listed in the question.