Sherlock: Capturing Probe Requests for Automatic Presence Detection

Oliveira, Luiz; Henrique, João; Schneider, Daniel; Souza, Jairo; Rodriques, Sergio; Sherr, Weiming

doi:10.1109/cscwd.2018.8465207

Cited by 7 publications

(5 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The main contributions of this present study include the following: the design of a WiFi presence detection device called Sherlock, which is specialized in detecting probe requests; and a method for estimating the number of people in a given location. This study is a follow-up of previous work [50] by the same research team. every minute, for each device.…”

Section: Proposed Methodsmentioning

confidence: 99%

See 1 more Smart Citation

Mobile Device Detection Through WiFi Probe Request Analysis

et al. 2019

Self Cite

View full text Add to dashboard Cite

Estimation of the presence of people in real time is extremely useful for businesses in providing better services while saving money. In this paper, we propose a technique for estimating the number of mobile devices present at a certain place and time, through analysis of WiFi probe requests from smart devices. Our goal is to address the problem through a solution that is immune to Media Access Control (MAC) address randomization strategies. The idea is to make use of information propagated in the environment, without the need to know the real MAC addresses of the devices. A state machine was modeled to detect the arrival, presence, and departure of devices in proximity to the sensors. A hardware prototype was developed for device detection, and its efficiency was evaluated in experiments that involved comparing the results of the proposed method with the manual measurements made by researchers. The proposed method provided very accurate correlations between the number of mobile devices detected and the real number of people in the environment.

show abstract

Section: Proposed Methodsmentioning

confidence: 99%

“…A new version of Sherlock, initially described in [50], has been developed. The current version is capable of capturing probe requests over multiple wireless interfaces, thus increasing the coverage of the capture mechanism on each of the transmission channels.…”

Section: Prototypementioning

confidence: 99%

Mobile Device Detection Through WiFi Probe Request Analysis

et al. 2019

Self Cite

View full text Add to dashboard Cite

show abstract

“…The effectiveness of CrowdProbe is attributed to its utilization of historical data collected over a 6-month period, as well as its incorporation of spatial and temporal constraints specific to the environment of the museum. Sherlock, as presented in [95] and [96], prioritizes presence detection rather than trajectory tracking. This system, based on the cost-effective ESP8266 board, leverages collected data to implement an occupancy resolution model.…”

Section: Passive Techniquesmentioning

confidence: 99%

A Tutorial on Privacy, RCM and Its Implications in WLAN

Ficara,

Garroppo,

Henry

2024

IEEE Commun. Surv. Tutorials

View full text Add to dashboard Cite

The proliferation of Wi-Fi devices has led to the rise of privacy concerns related to MAC Address-based systems used for people tracking and localization across various applications, such as smart cities, intelligent transportation systems, and marketing. These systems have highlighted the necessity for mobile device manufacturers to implement Randomized And Changing MAC address (RCM) techniques as a countermeasure for device identification. In response to the challenges posed by diverse RCM implementations, the IEEE has taken steps to standardize RCM operations through the 802.11aq Task Group (TG). However, while RCM implementation addresses some concerns, it can disrupt services that span both Layer 2 and upper-layers, which were originally designed assuming static MAC addresses. To address these challenges, the IEEE has established the 802.11bh TG, focusing on defining new device identification methods, particularly for Layer 2 services that require pre-association identification. Simultaneously, the IETF launched the MAC Address Device Identification for Network and Application Services (MADINAS) Working Group to investigate the repercussions of RCM on upper-layer services, including the Dynamic Host Configuration Protocol (DHCP).Concurrently, derandomization techniques have emerged to counteract RCM defense mechanisms. The exploration of these techniques has suggested the need for a broader privacy enhancement framework for WLANs that goes beyond simple MAC address randomization. These findings have prompted the inception of the 802.11bi TG, which aims to compile an exhaustive list of potential privacy vulnerabilities and prerequisites for a more private IEEE 802.11 standard.In this context, this tutorial aims to provide insights into the motivations behind RCM, its implementation, and its evolution over the years. It elucidates the influence of RCM on network processes and services. Furthermore, the tutorial delves into the recent progress made within the domains of 802.11bh, 802.11bi, and MADINAS. It offers a thorough analysis of the initial work undertaken by these groups, along with an overview of the relevant research challenges. The tutorial objective is to inspire the research community to explore innovative approaches and solutions that contribute to the ongoing efforts to enhance WLAN privacy through standardization initiatives.

show abstract

“…The study [22] introduces a novel model for estimating the presence of individuals within a scanning area. The model utilizes a specialized tool called Sherlock [23] to capture probe requests (PRs) transmitted by mobile devices. The model can detect and track the user's arrival, presence, and departure from the monitored area by analyzing the PR parameters.…”

Section: User Information Disclosure Through Mac Addressmentioning

confidence: 99%

A Novel Covert Channel for IEEE 802.11 Networks Utilizing MAC Address Randomization

Teca,

Natkaniec

2023

Applied Sciences

View full text Add to dashboard Cite

Vendors implement the MAC address randomization technique to prevent IEEE 802.11 client station devices from being tracked. Although it conceals device identity, it cannot hide its occurring data transmission. This paper presents a novel covert channel that leverages the MAC address randomization technique to create a covert channel to hide data transmission inside IEEE 802.11 networks. The secret data are a disposable random MAC address generated by the IEEE 802.11 station as part of the probe request frame while scanning the network. The paper presents the concept of the covert channel, its implementation, and performance metrics. The study covers diverse scenarios, including the adaptation of the modified Selective Repeat ARQ protocol to alleviate the impact of the number of client stations and their offered loads on the covert channel. The results show that with the appropriate parameter selections, we can adapt the covert channel to produce excellent throughput, efficiency, delay, and jitter according to the environment in which it is installed.

show abstract

Sherlock: Capturing Probe Requests for Automatic Presence Detection

Cited by 7 publications

References 6 publications

Mobile Device Detection Through WiFi Probe Request Analysis

Mobile Device Detection Through WiFi Probe Request Analysis

A Tutorial on Privacy, RCM and Its Implications in WLAN

A Novel Covert Channel for IEEE 802.11 Networks Utilizing MAC Address Randomization

Contact Info

Product

Resources

About