Phantom-CSI Attacks against Wireless Liveness Detection
Phantom-CSI Attacks against Wireless Liveness Detection
复制标题
DOI：
10.1145/3607199.3607245
复制
发表时间：
2023-10
期刊：
影响因子：
--
通讯作者：
Qiuye He;Song Fang
中科院分区：
文献类型：
--
作者：
Qiuye He;Song Fang
从本质上讲，所有实时监控人类行为的系统都是有吸引力的欺骗目标。例如，误导实时监控摄像头或语音可控物联网（IoT）系统（例如亚马逊Alexa和b谷歌Assistant）具有直接的直观好处，因此需要检测被监控行为的人类的活动性。新兴的研究方向集中在分析流行无线信号的变化，以检测视频或语音欺骗攻击，因为基于无线的技术不需要用户携带任何额外的设备或传感器来检测活动。视频/语音流和共存的无线信号传达了与人类活动相关的相同整体上下文信息的不同方面，而对前者的欺骗攻击打破了这种关系，因此后者可以很好地作为活动检测来增强前者。然而，我们认识并在此评估如何欺骗后者以及击败这种活体检测。在我们的攻击中，攻击者可以很容易地创建虚幻的无线信号，并将其与欺骗的视频/语音信号同步，这样合法用户就无法再区分真实和虚假的人类活动。在软件定义无线电平台上的真实实验结果验证了生成假CSI流的可能性，并证明了在虚拟CSI攻击下，视频和语音的无线活动检测系统的真阳性率（tpr）分别从100%欺骗检测降至4.4%和0。
All systems monitoring human behavior in real time are, by their nature, attractive targets for spoofing. For example, misdirecting live-feed security cameras or voice-controllable Internet-of-Things (IoT) systems (e.g., Amazon Alexa and Google Assistant) has immediately intuitive benefits, so there is a consequent need for detecting liveness of the human(s) whose behavior is being monitored. Emerging research lines have focused on analyzing changes in prevalent wireless signals to detect video or voice spoofing attacks, as wireless-based techniques do not require the user to carry any additional device or sensor for liveness detection. Video/voice streaming and coexisting wireless signals convey different aspects of the same overall contextual information related to human activities, and the presence of spoofing attacks on the former breaks this relationship, so the latter performs well as liveness detection to augment the former. However, we recognize and herein evaluate how to spoof the latter as well to defeat this liveness detection. In our attack, an adversary can easily create phantom wireless signals and synchronize them with spoofed video/voice signals, such that the legitimate user can no longer distinguish real from fake human activity. Real-world experimental results on top of software-defined radio platforms validate the possibility of generating fake CSI flows and demonstrate that with the phantom-CSI attack, the true positive rates (TPRs) of wireless liveness detection systems for video and voice decrease from 100% spoofing detection to just 4.4% and 0, respectively.