Geo-Spatial Location Spoofing Detection for Internet of Things

Abstract

We develop a new location spoofing detection algorithm for geo-spatial tagging and location-based services in the Internet of Things (IoT), called Enhanced Location Spoofing Detection using Audibility (ELSA) which can be implemented at the backend server without modifying existing legacy IoT systems. ELSA is based on a statistical decision theory framework and uses two-way time-of-arrival (TW-TOA) information between the user's device and the anchors. In addition to the TW-TOA information, ELSA exploits the implicit available audibility information to improve detection rates of location spoofing attacks. Given TW-TOA and audibility information, we derive the decision rule for the verification of the device's location, based on the generalized likelihood ratio test. We develop a practical threat model for delay measurements spoofing scenarios, and investigate in detail the performance of ELSA in terms of detection and false alarm rates. Our extensive simulation results on both synthetic and real-world datasets demonstrate the superior performance of ELSA compared to conventional non-audibility-aware approaches.

Location Verification Systems Based on Received Signal Strength With Unknown Transmit Power

“…Substituting (10) and (11) into (12), we obtain (13) Following (13), we obtain the desired result in Lemma 1 after some algebraic manipulations. Theorem 1: The false positive and detection rates of GLRT based on y are given by…”

“…Meanwhile, current mainstream positioning systems, such as the now ubiquitous WiFi positioning systems and GPS, are highly vulnerable to location-spoofing attacks due to their openness and wide public availability. Against this background, the deployment of a location verification system (LVS), which provides methods to guarantee the reliability of the location information (e.g., [6][7][8][9][10]), is of growing importance. The main purpose of an LVS is to verify ( based on signal observations) whether the claimed location of a user is consistent with his true position.…”

A Survey of Security Challenges, Attacks Taxonomy and Advanced Countermeasures in the Internet of Things

“…An autonomic solution is necessary to mitigate Spoofing attacks. A detection algorithm called Enhanced Location Spoofing detection using Audibility (ELSA) was developed for IoT [130].…”

True lies in geospatial big data: detecting location spoofing in social media

“…Location spoofing has also been reported in cyber warfare in launching cyber-attacks (Lee and Buehrer 2012). Further, location spoofing is not confined to people, it has also been increasingly used to spoof locations for the Internet of Things (Koh et al 2016). More recently, due to the worldwide fever in the location based game 'Pokémon Go', location spoofing was frequently deployed as a way to cheat in the game (Wehner 2016).…”