mmSpoof: Resilient Spoofing of Automotive Millimeter-wave Radars using Reflect Array
mmSpoof: Resilient Spoofing of Automotive Millimeter-wave Radars using Reflect Array
复制标题
DOI：
10.1109/sp46215.2023.10179371
复制
发表时间：
2023-05
期刊：
影响因子：
--
通讯作者：
Rohith Reddy Vennam;I. Jain;Kshitiz Bansal;Joshua Orozco;Puja Shukla;Aanjhan Ranganathan;Dinesh Bharadia
中科院分区：
文献类型：
--
作者：
Rohith Reddy Vennam;I. Jain;Kshitiz Bansal;Joshua Orozco;Puja Shukla;Aanjhan Ranganathan;Dinesh Bharadia
FMCW雷达是汽车驾驶不可或缺的一部分，可以对周围物体进行坚固和耐候的感知。然而，这些雷达很容易受到欺骗攻击，这些攻击可能会导致传感器故障，并可能导致事故。以前使用攻击者设备欺骗FMCW雷达的尝试并不十分有效，因为攻击者和受害者之间需要同步。我们提出了一种新的欺骗机制，称为MMSpoof，它不需要同步，并且对受害者雷达的各种安全特征和对策具有弹性。我们的欺骗机制使用了一个基于“反射阵列”的攻击者设备，通过适当的调制反射雷达信号来欺骗受害者的雷达。我们提供洞察力和机制，利用MMSpoof反射阵列的独特频移，灵活地欺骗受害者雷达上的任何距离和速度。我们设计了一种新的算法来估计这种频移，而不假设关于受害者雷达的先验信息。我们展示了在使用商用雷达的现实汽车驾驶场景中，使用商业现成组件的紧凑和移动设置的欺骗的有效性。
FMCW radars are integral to automotive driving for robust and weather-resistant sensing of surrounding objects. However, these radars are vulnerable to spoofing attacks that can cause sensor malfunction and potentially lead to accidents. Previous attempts at spoofing FMCW radars using an attacker device have not been very effective due to the need for synchronization between the attacker and the victim. We present a novel spoofing mechanism called mmSpoof that does not require synchronization and is resilient to various security features and countermeasures of the victim radar. Our spoofing mechanism uses a "reflect array" based attacker device that reflects the radar signal with appropriate modulation to spoof the victim’s radar. We provide insights and mechanisms to flexibly spoof any distance and velocity on the victim’s radar using a unique frequency shift at the mmSpoof’s reflect array. We design a novel algorithm to estimate this frequency shift without assuming prior information about the victim’s radar. We show the effectiveness of our spoofing using a compact and mobile setup with commercial-off-the-shelf components in realistic automotive driving scenarios with commercial radars.