Abstract:This paper introduces CSI-RFF, a new framework that leverages micro-signals embedded within Channel State Information (CSI) curves to realize Radio-Frequency Fingerprinting of commodity off-the-shelf (COTS) WiFi devices for open-set authentication. The micro-signals that serve as RF fingerprints are termed "micro-CSI". Through experimentation, we have found that the presence of micro-CSI can primarily be attributed to imperfections in the RF circuitry. Furthermore, this characteristic signal is detectable in WiFi 4/5/6 network interface cards (NICs). We have conducted further experiments to determine the most effective CSI collection configurations to stabilize micro-CSI. Yet, extracting micro-CSI for authentication purposes poses a significant challenge. This complexity arises from the fact that CSI measurements inherently include both micro-CSI and the distortions introduced by wireless channels. These two elements are intricately intertwined, making their separation non-trivial. To tackle this challenge, we have developed a signal space-based extraction technique for line-of-sight (LoS) scenarios, which can effectively separate the distortions caused by wireless channels and micro-CSI. Over the course of our comprehensive CSI data collection period extending beyond one year, we found that the extracted micro-CSI displays unique characteristics specific to each WiFi device and remains invariant over time. This establishes micro-CSI as a suitable candidate for device fingerprinting. Finally, we conduct a case study focusing on area access control for mobile robots. In particular, we applied our CSI-RFF framework to identify mobile robots operating in real-world indoor LoS environments based on their transmitted WiFi signals. To accomplish this, we have compared and employed anomaly detection algorithms for the authentication of 15 COTS WiFi 4/5/6 NICs that were carried by a mobile robot under both static and mobile conditions, maintaining an average signal-to-noise ratio (SNR) of 34 dB. Our experimental results demonstrate that the micro-CSI-based authentication algorithm can achieve an average attack detection rate close to 99% with a false alarm rate of 0% in both static and mobile conditions when using 20 CSI measurements to construct one fingerprint.

Rejecting the attack: Source authentication for Wi-Fi management frames using CSI Information

Securing Channel State Information in Multiuser MIMO with Limited Feedback.

WASTON: Inferring Critical Information to Enable Spoofing Attacks Using COTS Mmwave Radar

Detecting Rogue Access Points Using Client-agnostic Wireless Fingerprints.

Defending Wireless Networks from Radio Interference Attacks

Accurate and Robust Rogue Access Point Detection with Client-Agnostic Wireless Fingerprinting

Authenticating Smart Home Devices Via Home Limited Channels

An Efficient and DoS-resistant User Authentication Scheme for Two-Tiered Wireless Sensor Networks

Securing Wireless Systems Via Lower Layer Enforcements

An Efficient Privacy-Preserving Scheme for Wireless Link Layer Security

Byzantine Attacker Identification in Collaborative Spectrum Sensing: A Robust Defense Framework

Practical user authentication leveraging channel state information (CSI)

Enhancing Packet-Level Wi-Fi Device Authentication Protocol Leveraging Channel State Information

A Signature-Based Wireless Intrusion Detection System Framework for Multi-Channel Man-in-the-Middle Attacks Against Protected Wi-Fi Networks

Physical-Layer Authentication of Commodity Wi-Fi Devices via Micro-Signals on CSI Curves

Inter-Frame-Relationship Protected Signal: A New Design for Radio Frequency Fingerprint Authentication

Detection of man-in-the-middle attacks using physical layer wireless security techniques

CSI-RFF: Leveraging Micro-Signals on CSI for RF Fingerprinting of Commodity WiFi

On User Selective Eavesdropping Attacks in MU-MIMO: CSI Forgery and Countermeasure.

Spoofing-jamming attack based on cross-technology communication for wireless networks

Accurate and Efficient Wireless Device Fingerprinting Using Channel State Information