MASA: Measurement and Analysis of MAC Address Randomization with Sniffer Array
Yu,Yulian Pan,Wenjia Wu,Ming Yang
DOI: https://doi.org/10.1109/msn60784.2023.00056
2023-01-01
Abstract:MAC address randomization is being adopted by an ever-increasing number of Wi-Fi-enabled devices, which aims to prevent users from being tracked by embedding random MAC addresses in probe request frames. Through measurement and analysis, researchers have found that its specific implementation mechanism differs for devices with different operating systems and obtained some analysis results. However, since the MAC address constantly changes, it is challenging to efficiently capture probe request frames of multiple target devices in an environment that typically has a large number of devices. Additionally, new devices are constantly emerging, making the results of previous analysis likely to be outdated. To address these issues, we propose a novel solution to measure and analyze Wi-Fi MAC address randomization with a sniffer array, called MASA. Firstly, we utilize a sniffer array to simultaneously capture probe request frames by multiple sniffers in the environment. Then, we propose a timeout bloom filter-based frame aggregation and processing method to aggregate the frames from the sniffer array, exclude frames of non-target devices, and split frames into their own set for the target device in real time. On this basis, we analyze the MAC address randomization mechanism in terms of address changing pattern, frame transmission frequency, and frame field/Information Element (IE) variation, considering devices’ association state, display status, and power-saving mode. Finally, we conduct corresponding experiments in real environments and make some new findings in the analysis. For example, all the latest iOS devices implement randomization strategies not only in the MAC address field but also in the Sequence Number field, while the MAC address randomization mechanism of some Android and HarmonyOS devices exhibits significantly different behaviors in the unassociated state and associated state.