PMF (Protected Management Frames), defined in the 802.11w standard, is the primary technology used to enhance security specifically over the air interface. While WDS is for bridging, and DTLS/IPsec are used for tunnel encryption (like CAPWAP), PMF protects management frames (such as Disassociation, Deauthentication, and Robust Action frames) from being forged or spoofed by attackers. This prevents common DoS (Denial of Service) attacks where an attacker forcibly disconnects legitimate users from the Wi-Fi network.