Abstract:WiFi connection has been suffering from MAC forgery attacks due to the loose authentication mechanism between access points (APs) and clients. To address this problem, the physical (PHY) layer information-based fingerprint has been adopted for safe WiFi authentication. Since such a fingerprint is constant and unique for each specific network interface card (NIC), it can effectively prevent MAC forgery attacks. However, the PHY layer information-based fingerprint is still vulnerable to malicious attacks as it is extracted from Channel State Information (CSI), and its stability can be affected by the wireless environment. In this paper, we propose a novel undetectable attack framework, called PhyFinAtt, base on which the attacker can undermine the stability of the PHY layer-based authentication fingerprints through human movement and further attack the WiFi authentication protocols. Specifically, we first demonstrate that human movement at a designated location can affect the PHY fingerprint. We then illustrate the impact of human movement on the PHY fingerprint and the relationship between the movement and the channel quality to ensure that the PHY fingerprint is destroyed by the movement in an undetected way without affecting normal communication. Extensive experiments in real-world scenarios show that our proposed attack can effectively disrupt the stability of the PHY fingerprints and significantly degrade the performance of the authentication protocols based on such fingerprints. To the best of our knowledge, this is the first study on effective attacks against the PHY information-based WiFi authentication protocols. Furthermore, we also present a practical defense mechanism without involving any additional equipment to mitigate attacks similar to PhyFinAtt.

Adaptive Filter-Based Approach for PHY Fingerprints Extraction of Fast Ethernet Network

Device Authentication for 5G Terminals Via Radio Frequency Fingerprints

Res-DFNN: an NN-Based Device Fingerprint Extraction Method Using Network Packet Data

Detecting Rogue Access Points Using Client-agnostic Wireless Fingerprints.

Accurate and Robust Rogue Access Point Detection with Client-Agnostic Wireless Fingerprinting

Towards Safer Connections: Secure Authentication in 5G Networks Leveraging Radio Frequency Fingerprinting

A Lightweight Radio Frequency Fingerprint Extraction Scheme for Device Identification

Passive Fingerprinting for Wireless Devices: A Multi-Level Decision Approach

PhyFinAtt: an Undetectable Attack Framework Against PHY Layer Fingerprint-based WiFi Authentication

Algorithm and Implementation of Radio Frequency Fingerprinting Based on Multi-Resolution Analysis

Extraction of Fingerprint from Regular Expression for Efficient Prefiltering

Channel-State-Based Fingerprinting Against Physical Access Attack in Industrial Field Bus Network

Multilevel Fine Fingerprint Authentication Method for Key Operating Equipment Identification in Cyber-Physical Systems

Traffic Processing and Fingerprint Generation for Smart Home Device Event.

Transient Fingerprint Feature Extraction for WLAN Cards Based on Polynomial Fitting

Identification and authentication for wireless transmission security based on RF-DNA fingerprint

A Secure and Private Authentication Based on Radio Frequency Fingerprinting

Variational Autoencoder-Assisted Unsupervised Hardware Fingerprint Authentication in a Fiber Network

FingerBLE: A Device Fingerprint Identification Scheme for BLE Devices

Feature Extraction and Recognition of Radio Frequency Fingerprint Signal Suitable for Terminal

Open Set Hardware Fingerprint Authentication of Optical Transmitters in Fiber Networks