journal article·2018-03-28Open access

Defeat Your Enemy Hiding behind Public WiFi: WiGuard Can Protect Your Sensitive Information from CSI-Based Attack

Jie Zhang, Meng Li, Zhanyong Tang, Xiaoqing Gong, Wei Wang, Dingyi Fang, Zheng Wang

Applied Sciences· Volume 8· Issue 4

Abstract

Channel state information (CSI) has been recently shown to be useful in performing security attacks in public WiFi environments. By analyzing how CSI is affected by finger motions, CSI-based attacks can effectively reconstruct text-based passwords and locking patterns. This paper presents WiGuard, a novel system to protect sensitive on-screen input information in a public place. Our approach carefully exploits WiFi channel interference to introduce noise to attacker’s CSI measurements to reduce the success rate of CSI-based attacks. Our approach automatically detects when a CSI-based attack happens. We evaluate our approach by applying it to protect text-based passwords and pattern locks on mobile devices. Experimental results show that our approach is able to reduce the success rate of CSI-based attacks from 92–42% for text-based passwords and from 82–22% for pattern lock.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: Wireless Networks and Protocols · Indoor and Outdoor Localization Technologies · Bluetooth and Wireless Communication Technologies

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

School of Information Science and Technology, Northwest University, Xi’an 710127, China

School of Computing and Communications, Lancaster University, Lancaster LA1 4YX, UK

References (50)

Show source-provided references
1. Zhang, J., Tang, Z., Li, R., Chen, X., Gong, X.Q., Fang, D., and Wang, Z. (2017, January 21–24). Protect Sensitive Information against Channel State Information Based Attacks. Proceedings of the 2017 IEEE International Conference on Computational Science and Engineering, Guangzhou, China.10.1109/CSE-EUC.2017.221 ↗
2. William, R. (2007). Trumble. Shorter Oxford English Dictionary, Oxford University Press. [6th ed.].
3. Zhang, Y., Xia, P., Luo, J., Ling, Z., Liu, B., and Fu, X. (2012, January 19). Fingerprint attack against touch-enabled devices. Proceedings of the ACM Workshop on Security and Privacy in Smartphones and Mobile Devices, Raleigh, NC, USA.10.1145/2381934.2381947 ↗
4. Shukla, D., Kumar, R., Serwadda, A., and Phoha, V.V. (2014, January 3–7). Beware, Your Hands Reveal Your Secrets!. Proceedings of the ACM Sigsac Conference on Computer and Communications Security, Scottsdale, AZ, USA.10.1145/2660267.2660360 ↗
5. Ali, K., Liu, A.X., Wang, W., and Shahzad, M. (2015, January 7–11). Keystroke recognition using wifi signals. Proceedings of the 21st Annual International Conference on Mobile Computing and Networking, ACM, Paris, France.10.1145/2789168.2790109 ↗
6. Zhang, J., Zheng, X., and Tang, Z. (2016). Privacy Leakage in Mobile Sensing: Your Unlock Passwords Can Be Leaked through Wireless Hotspot Functionality. Mob. Inf. Syst., 2016.10.1155/2016/8793025 ↗
7. Li, M., Meng, Y., Liu, J., Zhu, H., Liang, X., Liu, Y., and Ruan, N. (2016, January 24–28). When CSI Meets Public WiFi: Inferring Your Mobile Phone Password via WiFi Signals. Proceedings of the ACM Sigsac Conference on Computer and Communications Security, Vienna, Austria.10.1145/2976749.2978397 ↗
8. Wang, G., Zou, Y., and Zhou, Z. (2014, January 7–11). We can hear you with Wi-Fi!. Proceedings of the 20th Annual International Conference on Mobile Computing and Networking, Maui, HI, USA.10.1145/2639108.2639112 ↗
9. Rouf, I., Mustafa, H., and Xu, M. (2012). Neighborhood watch: Security and privacy analysis of automatic meter reading systems. ACM Conf. Comput. Commun. Secur., 462–473.10.1145/2382196.2382246 ↗
10. Wikipedia (2016, August 10). Denial-Of-Service Attack. Available online: https://en.wikipedia.org/wiki/Denial-of-service_attack/.
11. Qiao, Y., Zhang, O., Zhou, W., Srinivasan, K., and Arora, A. (2016, January 16–18). PhyCloak: Obfuscating sensing from communication signals. Proceedings of the Usenix Conference on Networked Systems Design and Implementation, Santa Clara, CA, USA.
12. Xu, R., Shi, G., and Luo, J. (2011, January 19–22). Muzi: Multi-channel zigbee networks for avoiding wifi interference. Proceedings of the 2011 International Conference on Internet of Things and 4th International Conference on Cyber, Physical and Social Computing, Dalian, China.10.1109/iThings/CPSCom.2011.43 ↗
13. Villegas, E.G., Lopez-Aguilera, E., and Vidal, R. (2007, January 1–3). Effect of adjacent-channel interference in IEEE 802.11 WLANs. Proceedings of the CrownCom 2007 2nd International Conference on Cognitive Radio Oriented Wireless Networks and Communications, Orlando, FL, USA.10.1109/CROWNCOM.2007.4549783 ↗
14. Weighted coloring based channel assignment for WLANs10.1145/1094549.1094554 ↗
15. Lee, Y., Kim, K., and Choi, Y. (2002, January 6–8). Optimization of AP placement and channel assignment in wireless LANs. Proceedings of the LCN 2002. 27th Annual IEEE Conference on Local Computer Networks, Tampa, FL, USA.
16. Akl, R., and Arepally, A. (2007, January 25–29). Dynamic channel assignment in IEEE 802.11 networks. Proceedings of the PORTABLE07 International Conference on Portable Information Devices, Orlando, FL, USA.10.1109/PORTABLE.2007.63 ↗
17. Self-management in chaotic wireless deployments10.1007/s11276-006-9852-4 ↗
18. Distributed and adaptive resource management in Cloud-assisted Cognitive Radio Vehicular Networks with hard reliability guarantees
19. Zahra, P., Kang-Cheng, C., Chia-Mu, Y., and Mauro, C. (2018, January 15–19). RARE: Defeating Side Channels based on Data-Deduplication in Cloud Storage. Proceedings of the International Conference on Computer Communications: Cloud Computing Systems, Networks, and Applications (INFOCOM CCSNA), Honolulu, HI, USA.
20. MIMO Interference Alignment Over Correlated Channels With Imperfect CSI10.1109/TSP.2011.2124458 ↗
21. Nauryzbayev, G., and Seilov, S. (2016, January 19–21). Impact of antenna correlation and imperfect csi on interference alignment in compound MIMO BC. Proceedings of the International Conference on Information and Communication Technology Convergence, Jeju, Korea.10.1109/ICTC.2016.7763530 ↗
22. On Interference Alignment With Imperfect CSI: Characterizations of Outage Probability, Ergodic Rate and SER10.1109/TVT.2015.2397000 ↗
23. A Review on Interference Alignment in Multiuser Interference Channels10.1007/s11277-015-2474-3 ↗
24. CSI Feedback Reduction for Mimo Interference Alignment
25. Zhang, J., Lei, X., Shi, J., and De, L. (2016, January 21–23). Simulation study and performance analysis on Zigbee system with CCI. Proceedings of the Wireless and Optical Communication Conference, Chengdu, China.
26. Backes, F., Vacon, G., Callahan, P., Hawe, W.R., and Durand, R. (2010). Program for Adjusting Channel Interference between Access Points in a Wireless Network. (US7774013A1), U.S. Patent.
27. Yuan, W., Wang, X., and Linnartz, J.-P.M.G. (2007, January 15). A Coexistence Model of IEEE 802.15.4 and IEEE 802.11b/g. Proceedings of the 2007 14th IEEE Symposium on Communications and Vehicular Technology in the Benelux, Delft, The Netherlands.10.1109/SCVT.2007.4436237 ↗
28. Analysis and experimental verification of frequency-based interference avoidance mechanisms in IEEE 802.15. 410.1109/TNET.2014.2300114 ↗
29. Exploiting temporal and spatial variation for WiFi interference avoidance in ZigBee networks10.1504/IJSNET.2015.070396 ↗
30. Lee, L., Kang, G., and Zhang, X. (2012, January 10–13). An interference avoidance strategy for zigbee based WeHealth monitoring system. Proceedings of the IEEE, International Conference on E-Health Networking, Applications and Services, Beijing, China.
31. Wizbee: Wise zigbee coexistence via interference cancellation with single antenna10.1109/TMC.2014.2359673 ↗
32. Almeida, E., Cavalcante, A.M., and Paiva, R.C.D. (2013, January 9–13). Enabling LTE/WiFi coexistence by LTE blank subframe allocation. Proceedings of the 2013 IEEE International Conference on Communications (ICC), Budapest, Hungary.10.1109/ICC.2013.6655388 ↗
33. Zubow, A., and Sombrutzki, R. (2012, January 1–4). Adjacent channel interference in IEEE 802.11n. Proceedings of the 2012 IEEE Wireless Communications and Networking Conference (WCNC), Shanghai, China.10.1109/WCNC.2012.6213952 ↗
34. Tan, W.L., Bialkowski, K., and Portmann, M. (2010, January 16–19). Evaluating Adjacent Channel Interference in IEEE 802.11 Networks. Proceedings of the IEEE Vehicular Technology Conference, Taipei, Taiwan.10.1109/VETECS.2010.5493635 ↗
35. Xiao, J., Wu, K., and Yi, Y. (2013, January 8–11). Pilot: Passive device-free indoor localization using channel state information. Proceedings of the 2013 IEEE 33rd International Conference on Distributed Computing Systems (ICDCS), Philadelphia, PA, USA.10.1109/ICDCS.2013.49 ↗
36. Abdel-Nasser, H., Samir, R., Sabek, I., and Youssef, M. (2013, January 7–10). MonoPHY: Mono-stream-based device-free WLAN localization via physical layer information. Proceedings of the Wireless Communications and Networking Conference (WCNC), Shanghai, China.10.1109/WCNC.2013.6555311 ↗
37. Draft, W.G. (2003). Telecommunications and Information Exchange Between Systems-LAN/MAN Specific Requirements-Part 11: Wireless Medium Access Control (MAC) and Physical Layer (PHY) Specification: Specification for Radio Resource Measurement, IEEE Stdandard.
38. Adjacent channel interference in 802.11a is harmful: Testbed validation of a simple quantification model10.1109/MCOM.2011.5723815 ↗
39. Channel assignment schemes for infrastructure-based 802.11 WLANs: A survey10.1109/SURV.2010.020110.00047 ↗
40. Sin, T.W., Halim, M.N., Naredula, J.R., Fang, M.H., and Payne, K. (2002). Quality of Transmission across Packet-Based Networks. (US20020051464A1), U.S. Patent.
41. Abdelnasser, H., Youssef, M., and Harras, K.A. (May, January 26). Wigest: A ubiquitous wifi-based gesture recognition system. Proceedings of the 2015 IEEE Conference on Computer Communications (INFOCOM), Kowloon, Hong Kong, China.10.1109/INFOCOM.2015.7218525 ↗
42. Wang, J., Xie, B., Fang, D., Chen, X., Liu, C., Xing, T., and Nie, W. (2015, January 7). Accurate Device-Free Localization with Little Human Cost. Proceedings of the 1st International Workshop on Experiences with the Design and Implementation of Smart Objects, Paris, France.10.1145/2797044.2797050 ↗
43. LIBSVM: A library for support vector machines10.1145/1961189.1961199 ↗
44. Wang, W., Liu, A.X., and Shahzad, M. (2016, January 12–16). Gait recognition using wifi signals. Proceedings of the ACM International Joint Conference on Pervasive and Ubiquitous Computing, Heidelberg, Germany.10.1145/2971648.2971670 ↗
45. Borella, M.S., Swider, D., Uludag, S., and Brewster, G.B. (1998, January 14). Internet Packet Loss: Measurement and Implications for End-to-End QoS. Proceedings of the International Conference on Parallel Processing Workshops, Minneapolis, MN, USA.
46. Enhancement of QoS differentiation over IEEE 802.11 WLAN10.1109/LCOMM.2004.833787 ↗
47. Halperin, D., Hu, W., Sheth, A., and Wetherall, D. (2017, March 20). Linux 802.11n CSI Tool. Available online: http://dhalperi.github.io/linux-80211n-csitool/.
48. A channel allocation scheme to mitigate Wifi interference for wireless sensor networks
49. H3C, The Leader in Digital Solution (2017, April 10). H3C Corp. Available online: http://www.h3c.com.hk.
50. Uellenbeck, S., Dürmuth, M., Wolf, C., and Holz, T. (2013, January 4–8). Quantifying the security of graphical passwords: The case of android unlock patterns. Proceedings of the 2013 ACM SIGSAC Conference on Computer & Communications Security, Berlin, Germany.10.1145/2508859.2516700 ↗