802.11 user fingerprinting
802.11 user fingerprinting
复制标题
DOI：
10.1145/1287853.1287866
复制
发表时间：
2007-09
期刊：
影响因子：
--
通讯作者：
Jeffrey Pang;Ben Greenstein;R. Gummadi;S. Seshan;D. Wetherall
中科院分区：
文献类型：
--
作者：
Jeffrey Pang;Ben Greenstein;R. Gummadi;S. Seshan;D. Wetherall
802.11设备和网络的无处不在使得任何人都能极其轻松地追踪我们的一举一动。每个802.11设备都会发送一个全球唯一且固定的MAC地址，因此很容易被识别。作为回应，近期的研究提出用化名（即临时的、无法关联的名称）来替代此类标识符。在本文中，我们证明化名不足以防止802.11设备被追踪，因为隐含标识符，即802.11流量的识别特征，能够高精度地识别许多用户。例如，即使没有唯一的名称和地址，我们估计当用户在一个繁忙的热点区域停留一天时，攻击者能够以90%的准确率识别64%的用户。我们提出了一种基于四个此前未被识别的隐含标识符的自动化程序，即使使用了化名和加密，该程序也能在三个真实的802.11流量记录中识别用户。我们发现大多数用户可以使用我们的技术被识别，但我们识别用户的能力并不一致；一些用户不容易被识别。尽管如此，我们表明即使是单个隐含标识符也足以区分许多用户。因此，我们认为，为了防止在无线网络中对用户进行追踪，除了消除明确的标识符（即唯一的名称和地址）之外，还必须考虑其他设计因素。
The ubiquity of 802.11 devices and networks enables anyone to track our every move with alarming ease. Each 802.11 device transmits a globally unique and persistent MAC address and thus is trivially identifiable. In response, recent research has proposed replacing such identifiers with pseudonyms (i.e., temporary, unlinkable names). In this paper, we demonstrate that pseudonyms are insufficient to prevent tracking of 802.11 devices because implicit identifiers, or identifying characteristics of 802.11 traffic, can identify many users with high accuracy. For example, even without unique names and addresses, we estimate that an adversary can identify 64% of users with 90% accuracy when they spend a day at a busy hot spot. We present an automated procedure based on four previously unrecognized implicit identifiers that can identify users in three real 802.11 traces even when pseudonyms and encryption are employed. We find that the majority of users can be identified using our techniques, but our ability to identify users is not uniform; some users are not easily identifiable. Nonetheless, we show that even a single implicit identifier is sufficient to distinguish many users. Therefore, we argue that design considerations beyond eliminating explicit identifiers (i.e., unique names and addresses), must be addressed in order to prevent user tracking in wireless networks.