Detection of man‐in‐the‐middle attacks using physical layer wireless security techniques

Abstract

Compared with a wired network, a wireless network is not protected by the cable transmission medium. Information is broadcasted over the air and it can be intercepted by anyone within the transmission range. Even though the transmissions could potentially be protected by security authentication mechanisms, malicious users can still intercept the information by mimicking the characteristics of normal user or a legitimate access point. This scenario is referred as a man‐in‐the‐middle (MITM) attack. In the MITM attack, the attackers can bypass the security mechanisms, intercept the unprotected transmission packets, and sniff the information. Because of several vulnerabilities in the IEEE 802.11 protocol, it is difficult to defend against a wireless MITM attack. In this paper, a received signal strength indicator (RSSI)‐based detection mechanism for MITM attacks is proposed. RSSI information is an arbitrary integer that indicates the power level being received by the antenna. The random RSSI values are processed via a sliding window, yielding statistic information about the signal characteristics such as mean and standard deviation profiles. By analyzing those profiles, the detection mechanism can detect if a rogue access point, the key component of an MITM attack, is launched. Our proposed approach has been validated via hardware experimentation using Backtrack 5 tools and MATLAB software suite. Copyright © 2014 John Wiley & Sons, Ltd.

Star-specific Key-homomorphic PRFs from Linear Regression and Extremal Set Theory

“…To defend against such attacks, we can apply techniques that allow us to detect an MITM attack over physical layer [303], and if one is detected, the antenna of ∂ i 's central hub, C i , can be reconfigured to randomize all channels in ∂ i [237]. This only requires a reconfigurable antenna (RA) at each central hub.…”

Defeating MITM Attacks on Cryptocurrency Exchange Accounts with Individual User Keys

“…Le Wang et al proposed in 2016 an approach to detect MITM attacks based on the received signal strength indicators which indicate the power level being received by the antenna. The received indicators are processed and analyzed to detect any rogue access points using which hackers launch their MITM attacks [10] . However, this approach provides only a mechanism to detect rouge Aps on wireless networks, which are used to as a means to MITM attacks.…”

Amplify-and-forward relay identification using joint Tx/Rx I/Q imbalance-based device fingerprinting

“…It is considered that D can only receive signals via R. The two individual channels S-R and R-D experience independent block fading so that the instantaneous complex channel gains h SR and h RD are independent and fixed for a block [25][26][27][28][29]. n SR and n RD represent the receiving noises at R and D, which are circularly symmetric complex Gaussian (CSCG) random variables as n SR ∼ CN 0, σ 2 1 and n RD ∼ CN 0, σ 2 2 . As shown in Fig.…”

“…However, identifying relay nodes is of great importance in practice. Signal relaying can potentially introduce new communication security threats, such as the ghostand-leech attack [1], the man-in-the-middle attack [2], and the denial of service attack [3]. Some relay selection schemes require pre-classifying relays into trusted or untrusted groups for cooperation [4][5][6].…”