A system and method for detecting unauthorized use of a wireless local area network is described, wherein the network includes mobile units that communicate with at least one access point. First network traffic data is accumulated at a mobile unit. Second network traffic data is accumulated at an access point. The first and second traffic data is communicated to a computer and is correlated by the computer to identify non-correlated traffic data. An alarm condition is signaled when the non-correlated traffic data exceeds a threshold.