Here, there, and everywhere

Schepers, Domien; Singh, Mridula; Ranganathan, Aanjhan

doi:10.1145/3448300.3467828

Cited by 9 publications

(6 citation statements)

References 42 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The most common WiFi LOS identification method in the literature was based on the statistical features of the signal measures. Several works employed the Round Trip Time (RTT) [55][56][57][58][59][60], Received Signal Strength (RSS) [61][62][63][64]. The researchers in [65] used RSS in identifying LOS conditions.…”

Section: Related Workmentioning

confidence: 99%

WiFi Access Points Line-of-Sight Detection for Indoor Positioning Using the Signal Round Trip Time

2022

View full text Add to dashboard Cite

The emerging WiFi Round Trip Time measured by the IEEE 802.11mc standard promised sub-meter-level accuracy for WiFi-based indoor positioning systems, under the assumption of an ideal line-of-sight path to the user. However, most workplaces with furniture and complex interiors cause the wireless signals to reflect, attenuate, and diffract in different directions. Therefore, detecting the non-line-of-sight condition of WiFi Access Points is crucial for enhancing the performance of indoor positioning systems. To this end, we propose a novel feature selection algorithm for non-line-of-sight identification of the WiFi Access Points. Using the WiFi Received Signal Strength and Round Trip Time as inputs, our algorithm employs multi-scale selection and Machine Learning-based weighting methods to choose the most optimal feature sets. We evaluate the algorithm on a complex campus WiFi dataset to demonstrate a detection accuracy of 93% for all 13 Access Points using 34 out of 130 features and only 3 s of test samples at any given time. For individual Access Point line-of-sight identification, our algorithm achieved an accuracy of up to 98%. Finally, we make the dataset available publicly for further research.

show abstract

Section: Related Workmentioning

confidence: 99%

WiFi Access Points Line-of-Sight Detection for Indoor Positioning Using the Signal Round Trip Time

2022

View full text Add to dashboard Cite

show abstract

“…That is, the firmware must not filter out any measurements results exceeding some pre-defined thresholds. Fortunately, for every card we tested, there is a suitable firmware version [12]. In Table 5.1, we present the results together with their standard deviation.…”

Section: Discussionmentioning

confidence: 99%

“…In addition to denial-of-service attacks disrupting the connection, our attacks can cause disruptions in time-sensitive operations such as Wi-Fi Fine Timing Measurement (FTM). Our queue-based disruption attacks, targeting measurement requests, extend the FTM vulnerabilities identified in [12,16].…”

Section: Related Workmentioning

confidence: 94%

“…Rather troubling, the protocol is used for security purposes too, for example, as part of network onboarding of Internet of Things (IoT) devices [84]. With the release of commercial products supporting Wi-Fi FTM, researchers performed security analyses [12] and accuracy evaluations [126,127] indicating meter-level accuracy in low-multipath environments [83]. We extend their work by evaluating modern devices supporting wider bandwidth channels, and additionally show two-meter level accuracy can be achieved on low-multipath 20 MHz bandwidth channels, matching evaluation results obtained in [126].…”

Section: Related Workmentioning

confidence: 99%

“…Evaluation We evaluated Linux 5.17.6 with a custom-built application to initiate distance measurement sessions, and find the kernel buffers Wi-Fi FTM frames in practice. Since Wi-Fi FTM applications are most often deployed on Linux-based systems [12], we conjecture they may all be vulnerable.…”

Section: Queueing Of Wi-fi Ftm Requestsmentioning

confidence: 99%

See 2 more Smart Citations

Towards rapid prototyping for wi-fi security research

Schepers

View full text Add to dashboard Cite

The rapid deployment of wireless networks, combined with an increasing demand for performance and security, resulted in the significant evolution of standards. Today, ) and Wi-Fi Protected Access 3 (WPA3) are the latest standard and set of security protocols. In order to enhance the security protections offered by these networks, it remains key to adopt the newest standards and promptly deprecate any old and vulnerable protocols. With this perspective, and the knowledge that early research in new protocols allows us to identify and address shortcomings before they are widely-adopted in practice, we are motivated to perform rigorous security and privacy analyses.In this dissertation, we perform an extensive wireless survey to understand and contextualize the Wi-Fi (IEEE 802.11) landscape. It allows us to gain real-world insights in the adoption rates of deprecated, recommended, and state-of-the-art protocols, and thereby identify trends and determine their security impact in practice. Based on our newfound insights, we perform a security and privacy analysis on the Temporal Key Integrity Protocol (TKIP) and Wi-Fi Fine Timing Measurement (FTM), revealing a wide-variety of sidechannels and security vulnerabilities. In order to ease and streamline our research process, and address implementation challenges faced throughout, we design a novel framework for rapid prototyping. Our framework allows one to rapidly test hypothesis on new weaknesses, implement proof-of-concepts, build on-target fuzz-testing tools, create testing suites (e.g., test if a device is vulnerable to known attacks), and automate experiments. We then demonstrate the features of our framework by means of two practical use cases. First, we perform a security analysis on the Wi-Fi Management Frame Protection (MFP) standard and its implementations, revealing numerous deauthentication vulnerabilities. Second, we analyze frame queuing mechanisms used within access points, revealing vulnerabilities which enable an adversary to bypass encryption. Finally, we release our framework for rapid prototyping to the community in order to encourage and support further security and privacy research.

show abstract

Malware Spreading Model for Routers in Wi-Fi Networks

Tran

Dang

et al. 2022

IEEE Access

View full text Add to dashboard Cite

Here, there, and everywhere

Cited by 9 publications

References 42 publications

WiFi Access Points Line-of-Sight Detection for Indoor Positioning Using the Signal Round Trip Time

WiFi Access Points Line-of-Sight Detection for Indoor Positioning Using the Signal Round Trip Time

Towards rapid prototyping for wi-fi security research

Malware Spreading Model for Routers in Wi-Fi Networks

Contact Info

Product

Resources

About