Hmmmm,

There seems to be some semantics involved here?

I am no expert in this area, but my understanding is that a deauthentication attack only requires one successful connection and so would be a DoS.

However, the most obvious solution that many people would try is to move the access point(s) and client(s). They may not even know that they are being attacked, but this would work if it took them out of range/visibility.

In these circumstances a determined attacker might use several attacking devices surrounding the target. I guess that would possibly be regarded as a DDoS, but you could argue the toss given that only one of the attackers was actually causing the deauthentication?

I liked HYBR|D's solution but on a similar note I have a friend who simply disabled the wireless crap and reverted to good old Cat5/RJ45 connections. That worked for him, but I am not sure if he was being attacked or just getting interference.

My next suggestion would be some sort of Faraday cage. If no signals can get in or out of the WiFi zone, then no attacker will see you or be able to connect.

Another possibility is to use directional or line of sight connections. That seems to work for the military, but there again they have guns and will shoot anybody in the wrong colour uniform

Seriously though, that approach would greatly restrict the opportunity offered to a potential attacker when compared to omnidirectional connections.

Obviously, if you thwart such attacks you won't see the attacker unless you set up some sort of honeypot or surveillance equipment.

Just a few thoughts