Our proposed scheme requires that the rogue AP
monitoring be performed in the switch where the rogue AP is
immediately connected or one immediate hop downstream.
This becomes challenging and costly when one considers
large-scale networks (e.g., campus networks). We are
currently investigating techniques for performing the analysis
further upstream. Specifically, we plan to determine the
relationship between the number of hops upstream and the