Exploiting CSI-MIMO for Accurate and Efficient Device Identification
Exploiting CSI-MIMO for Accurate and Efficient Device Identification
复制标题
DOI：
10.1109/globecom38437.2019.9014191
复制
发表时间：
2019-12
期刊：
影响因子：
--
通讯作者：
Laxima Niure Kandel;Zhuosheng Zhang;Shucheng Yu
中科院分区：
文献类型：
--
作者：
Laxima Niure Kandel;Zhuosheng Zhang;Shucheng Yu
由于无线媒体固有的广播性质，无线局域网成为各种恶意攻击的目标，如MAC身份欺骗、流氓AP攻击、网络免费加载等。这些攻击会带来安全和隐私威胁，并阻碍WLAN网络的无忧部署。为了阻止这些攻击，现有的研究建议使用硬件特定的缺陷作为ap和/或客户端唯一的不可伪造的指纹。不幸的是，现有的解决方案仅限于静态和稳定的环境，或者使用定制的硬件，阻碍了它们的大规模采用。为了克服这些限制，在这项工作中，我们建议使用mimo -无线电发射机振荡器之间的相对相位差分布作为区分特征或指纹。更具体地说，我们证明了单个MIMO-OFDM（多输入多输出正交频分复用）发射机上多个射频链的非理想性可以被提取并用作可靠的设备指纹。每个发射机射频链都有一个随机的初始相位偏移，它们彼此之间的差异随着时间的推移是稳定的，每个发射机设备的差异是唯一的，不付出巨大的努力和成本就不能被对手改变。我们的功能原型使用从现成硬件获得的带内信道的物理层信道状态信息（CSI）来测量这些未知的相位差。我们的设计消除了昂贵的定制硬件，不受环境变化的影响，并支持设备移动性，使其在真实的室内环境中具有实用性和可部署性。使用17个英特尔网络接口卡（nic）进行实验评估，在静态和移动设备状态下，设备识别准确率分别达到97%和92%。在相同的模型和制造商设备中，潜在的制造变化通常很低，这样有希望的结果显示了我们设计的有效性，并表明由于更高的制造变化，跨多模型和多制造商卡的精度更高。
Due to the inherent broadcast nature of the wireless medium, Wireless Local Area Networks (WLANs) are targets of a variety of malicious attacks, for example, MAC identity spoofing, rogue AP attack, and network freeloading. These attacks invite security and privacy threats and hinder the worry-free deployment of WLAN networks. To thwart these attacks, existing research has proposed to use hardware-specific imperfections as a unique unforgeable fingerprint for the APs and/or clients. Unfortunately, existing solutions are limited to static and stable environments or use customized hardware preventing their wide-scale adoption. To overcome the limitations, in this work, we propose to use the distribution of relative phase differences between MIMO-radio transmitter oscillators as a distinguishing trait or fingerprint. More specifically, we show that the nonidealities of the multiple RF chains on a single MIMO-OFDM (Multiple Input Multiple Output-Orthogonal Frequency Division Multiplexing) transmitter can be extracted and utilized as a reliable device fingerprint. Each transmitter RF chain has a random initial phase offset, and their difference relative to one another is stable over time, differs uniquely for each transmitter device and cannot be altered by the adversary without significant effort and cost. Our functional prototype measures these unknown phase differences using PHY-layer Channel State Information (CSI) of the in-band channel obtained from off-the-shelf hardware. Our design eliminates expensive custom-built hardware, is invariant to environmental variations and supports device mobility making it practical and deployable in real indoor settings. Experimental evaluation using 17 Intel Network Interface Cards (NICs) resulted in 97 % and 92 % device identification accuracy for static and mobile device states respectively. Such promising results with identical model and manufacturer devices wherein underlying manufacturing variations are typically low showcase the effectiveness of our design and suggest even higher accuracy across multi-model and multi-manufacturer cards because of the higher manufacturing variations.