PACMAN Attack: A Mobility-Powered Attack in Private 5G-Enabled Industrial Automation System
PACMAN Attack: A Mobility-Powered Attack in Private 5G-Enabled Industrial Automation System
复制标题
DOI：
10.1109/icc45041.2023.10279086
复制
发表时间：
2023-02
期刊：
影响因子：
--
通讯作者：
Md. Rashedur Rahman;Moinul Hossain;Jiang Xie
中科院分区：
文献类型：
--
作者：
Md. Rashedur Rahman;Moinul Hossain;Jiang Xie
由于5G架构的多功能性和灵活性，3GPP推出了专用5G来支持下一代工业自动化系统（IAS）。除了 3.5GHz CBRS 频段外，5GHz 等非授权频段因其免费和丰富的性质而被视为附加介质。然而，在使用未经许可的频段时，工业设备必须与 Wi-Fi 等现有设备共存，这可能会带来新的安全威胁并复活旧的安全威胁。在本文中，我们提出了一种由支持移动性的恶意 Wi-Fi 接入点（mmAP）进行的新型攻击策略，即 PACMAN 攻击，以利用异构共存引入的漏洞。 mmAP 能够在物理表面移动以识别任务关键型设备，通过频域跳跃来检测受害者的操作信道，并发起传统的基于 MAC 层的攻击。攻击者的多维移动性使其不受假设静态对手的最先进检测技术的影响。此外，我们提出了一种新颖的基于马尔可夫决策过程（MDP）的框架来智能地设计攻击者在空间和频率上的多维移动性。数学分析和广泛的模拟结果显示了所提出的移动动力攻击的不利影响。
3GPP has introduced Private 5G to support the next-generation industrial automation system (IAS) due to the versatility and flexibility of 5G architecture. Besides the 3.5GHz CBRS band, unlicensed spectrum bands, like 5GHz, are considered as an additional medium because of their free and abundant nature. However, while utilizing the unlicensed band, industrial equipment must coexist with incumbents, e.g., Wi-Fi, which could introduce new security threats and resuscitate old ones. In this paper, we propose a novel attack strategy conducted by a mobility-enabled malicious Wi-Fi access point (mmAP), namely PACMAN attack, to exploit vulnerabilities introduced by heterogeneous coexistence. A mmAP is capable of moving around the physical surface to identify mission-critical devices, hopping through the frequency domain to detect the victim's operating channel, and launching traditional MAC layer-based attacks. The multi-dimensional mobility of the attacker makes it impervious to state-of-the-art detection techniques that assume static adversaries. In addition, we propose a novel Markov Decision Process (MDP) based framework to intelligently design an attacker's multi-dimensional mobility in space and frequency. Mathematical analysis and extensive simulation results exhibit the adverse effect of the proposed mobility-powered attack.