Wireless Intrusion Detection and Device Fingerprinting through Preamble Manipulation
Wireless Intrusion Detection and Device Fingerprinting through Preamble Manipulation
复制标题
DOI：
10.1109/tdsc.2014.2366455
复制
发表时间：
2015-09
影响因子：
7.3
通讯作者：
Benjamin W. P. Ramsey;B. Mullins;M. Temple;M. Grimaila
中科院分区：
文献类型：
--
作者：
Benjamin W. P. Ramsey;B. Mullins;M. Temple;M. Grimaila
由于传输介质的竞争性，无线网络特别容易受到欺骗和路由中毒攻击。最近的工作调查物理层特征，如接收信号强度或射频指纹，以定位和识别恶意设备。在本文中，我们展示了一种新的和互补的方法，利用无线设备之间的物理层差异，更节能和不变的环境。具体来说，我们利用收发器硬件类型之间的细微设计差异。收发器实现无线网络协议的物理层方面，但具体的硬件实现因制造商和设备类型而异。在本文中，我们证明了精确的操作的物理层报头防止收发器类型的子集从接收操纵的数据包。通过使用少量的具有操纵的比特数和帧长度的数据包从无线设备请求应答，响应模式识别被测设备的真实收发器类别。在这里，我们展示了一个收发器分类的六个类，超过99%的准确性，无论环境。我们成功地演示了无线多因素身份验证，入侵检测，和收发器类型的指纹通过前导码操作。
Wireless networks are particularly vulnerable to spoofing and route poisoning attacks due to the contested transmission medium. Recent works investigate physical layer features such as received signal strength or radio frequency fingerprints to localize and identify malicious devices. In this paper we demonstrate a novel and complementary approach to exploiting physical layer differences among wireless devices that is more energy efficient and invariant with respect to the environment. Specifically, we exploit subtle design differences among transceiver hardware types. Transceivers fulfill the physical-layer aspects of wireless networking protocols, yet specific hardware implementations vary among manufacturers and device types. In this paper we demonstrate that precise manipulation of the physical layer header prevents a subset of transceiver types from receiving the manipulated packet. By soliciting acknowledgments from wireless devices using a small number of packets with manipulated preambles and frame lengths, a response pattern identifies the true transceiver class of the device under test. Herein we demonstrate a transceiver taxonomy of six classes with greater than 99 percent accuracy, irrespective of environment. We successfully demonstrate wireless multi-factor authentication, intrusion detection, and transceiver type fingerprinting through preamble manipulation.