Abstract:WiFi connections are vulnerable to simulated attacks from rogue access points (AP) or devices whose SSID and/or MAC/IP address are the same as legitimate devices. This kind of attack is difficult to counter with traditional network security mechanisms. In this paper, we propose a new security mechanism that uses environment-independent features extracted from channel state information (CSI) to detect and identify rogue WiFi devices or APs, and reject their connections. We find that due to the I/Q imbalance and imperfect oscillator of each WiFi network card (NIC), the nonlinear phase error of different subcarriers will vary with the NIC. Through our experimental verification, this cross-subcarrier phase feature is invariant to the location and the environment. We deploy systems on two platforms that can extract constant phase errors from the constantly changing CSI in less than one second, which is at least 8× faster than that of the state-of-the-art solution. Extensive experiments on commercial routers and end devices in different scenarios show that based on the Industral Platform Computer (IPC) platform, where only non-encrypted rogue connections can be detected, the detection accuracy rate reaches 96%, and the false alarm rate is less than 2%. Based on the ASUS router platform (a commercial WiFi router), WiFi channels and smart device types are not restricted, which greatly improved universality, and the accuracy of device connection detection can even reach more than 99%. We improve a device-type identification method based on the communication traffic features of the device when connected to WiFi. Experiments show that even if there are multiple similar devices from the same manufacturer, the accuracy of device type detection exceeds 99%.

A SDR-based Verification Platform for 802.11 PHY Layer Security Authentication.

TickSEC: A Novel Reconfigurable Platform for WiFi Physical Layer Security

Device Authentication for 5G Terminals Via Radio Frequency Fingerprints

Securing Wireless Systems Via Lower Layer Enforcements

Towards Safer Connections: Secure Authentication in 5G Networks Leveraging Radio Frequency Fingerprinting

Physical Layer Security Verification System Based on Software Defined Radio

Physical-Layer Authentication of Commodity Wi-Fi Devices via Micro-Signals on CSI Curves

Enhancing Packet-Level Wi-Fi Device Authentication Protocol Leveraging Channel State Information

Development of Physical Layer Security Simulation Platform

Real-Time Identification of Rogue WiFi Connections in the Wild

Real-time Identification of Rogue WiFi Connections Using Environment-Independent Physical Features

Rejecting the attack: Source authentication for Wi-Fi management frames using CSI Information

Practical user authentication leveraging channel state information (CSI)

Authenticating Users Through Fine-Grained Channel Information

Segment-Based Formal Verification of WiFi Fragmentation and Power Save Mode

Physical Layer Authentication and Identification in Wireless Network Via the Locations of Surrounding Noise Sources

Channel state information based physical layer authentication for Wi‐Fi sensing systems using deep learning in Internet of things networks

Physical Layer Security for the Internet of Things: Authentication and Key Generation

Communication is Verification: IoT Identifier System Using Device Fingerprints

Phy-Layer Authentication by Introducing Controlled Inter Symbol Interference

Hardware/Software Co-Verification Platform for EOS Design