WPFD: Active User-Side Detection of Evil Twins
Source abstract
Abstract
The bothersome evil twin problem has an active user-side remedy in the form of the Wireless Packet Forwarding Detector (WPFD). The evil twin issue can lead to further security problems, including man-in-the-middle (MITM) attacks. Open public Wi-Fi connections have provided potential answers to this issue, although they often need more data that people either cannot get or are too pricey for regular users. The solution that we created does not require these standards. It allows users’ notebooks to be used to check for evil twins. We have succeeded in developing a user-side detection system that can successfully identify the presence of an evil twin. The packet forwarding behavior generated by the evil twin and the TCP/IP (Transmission Control Protocol/Internet Protocol) protocol are both used by the WPFD. It can identify evil twins without a hitch when we utilize accessible Wi-Fi settings in public spaces or IoT smart homes with unencrypted WLANs (Wireless Local Area Network). However, neither additional data nor a wireless network administrator’s assistance is needed. We compare our work to various publications on popular Rogue Access Points (APs) or IoT (Internet of Things) smart homes. The WPFD does not require any extra setup to install on the host of any end user. According to experimental findings, the WPFD true positive and true negative rates are 100% even when Received Signal Strength Index (RSSI) is 45%.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Internet Traffic Analysis and Secure E-voting · Network Security and Intrusion Detection · Spam and Phishing Detection
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Computer Science & Information Engineering, National Central University, Taoyuan City 320317, Taiwan
Information Engineering College, Guangzhou Panyu Polytechnic, Panyu District, Guangzhou 511400, China
Department of Applied Foreign Languages, Chung Shan Medical University, Taichung City 40402, Taiwan
Chunghwa Telecom Co., Ltd. Telecommunication Laboratories, Jhongli City 32001, Taiwan
Funding
Ministry of Science and Technology, Taiwan, R.O.C. · Innovation and Entrepreneurship Training Program-Intelligent and Convenient Elderly Physical Examination System · Brain Ripple Encryption Based on Emotional Speech · Lightweight authentication key negotiation with privacy protection in a medical environment
References (34)
Show source-provided references
1. De la Cruz, J.E.C., Goyzueta, C.A.R., and Cahuana, C.D. (2020, January 3–5). Intrusion Detection and Prevention System for Production Supervision in Small Businesses Based on Raspberry Pi and Snort. Proceedings of the 2020 IEEE XXVII International Conference on Electronics, Electrical Engineering and Computing (INTERCON), Lima, Peru.10.1109/INTERCON50315.2020.9220240 ↗
2. EvilScout: Detection and mitigation of evil twin attack in SDN enabled WiFi10.1109/TNSM.2020.2972774 ↗
3. Nakhila, O., and Zou, C. (2016, January 1–3). User-side wi-fi evil twin attack detection using random wireless channel monitoring. Proceedings of the MILCOM 2016-2016 IEEE Military Communications Conference, Baltimore, MD, USA.10.1109/MILCOM.2016.7795501 ↗
4. On fast and accurate detection of unauthorized wireless access points using clock skews10.1109/TMC.2009.145 ↗
5. Lu, Q., Qu, H., Zhuang, Y., Lin, X.-J., Zhu, Y., and Liu, Y. (2017, January 1–4). A passive client-based approach to detect evil twin attacks. Proceedings of the 2017 IEEE Trustcom/BigDataSE/ICESS, Sydney, Australia.10.1109/Trustcom/BigDataSE/ICESS.2017.242 ↗
6. Client-side evil twin attacks detection using statistical characteristics of 802.11 data frames10.1587/transinf.2018EDP7030 ↗
7. SLFAT: Client-side evil twin detection approach based on arrival time of special length frames10.1155/2019/2718741 ↗
8. RAPD algorithm: Detection of rogue access point in wireless network
9. Active user-side evil twin access point detection using statistical techniques10.1109/TIFS.2012.2207383 ↗
10. IoT threat mitigation engine empowered by artificial intelligence multi-objective optimization10.1016/j.jnca.2022.103398 ↗
11. Detection, R.A.P (2008). Automatically Detect and Manage Wireless Threats to Your Network.
12. Bahl, P., Chandra, R., Padhye, J., Ravindranath, L., Singh, M., Wolman, A., and Zill, B. (2007, January 10–12). Enhancing the security of corporate Wi-Fi networks using DAIR. Proceedings of the 4th International Conference on Mobile Systems, Applications and Services, Singapore.10.1145/1134680.1134682 ↗
13. PEDR: Exploiting phase error drift range to detect full-model rogue access point attacks10.1016/j.cose.2021.102581 ↗
14. Yin, H., Chen, G., and Wang, J. (2007, January 10–14). Detecting protected layer-3 rogue APs. Proceedings of the 2007 Fourth International Conference on Broadband Communications, Networks and Systems (BROADNETS′07), Raleigh, NC, USA.
15. Beyah, R., Kangude, S., Yu, G., Strickland, B., and Copeland, J. (December, January 19). Rogue access point detection using temporal traffic characteristics. Proceedings of the IEEE Global Telecommunications Conference, GLOBECOM′04, Dallas, TX, USA.
16. RIPPS: Rogue identifying packet payload slicer detecting unauthorized wireless hosts through network traffic conditioning10.1145/1330332.1330334 ↗
17. A timing-based scheme for rogue AP detection10.1109/TPDS.2011.125 ↗
18. Ma, L., Teymorian, A.Y., and Cheng, X. (2008, January 15–17). A hybrid rogue access point protection framework for commodity Wi-Fi networks. Proceedings of the IEEE INFOCOM 2008—The 27th Conference on Computer Communications, Phoenix, AZ, USA.10.1109/INFOCOM.2008.178 ↗
19. A client-side detection mechanism for evil twins10.1016/j.compeleceng.2015.10.010 ↗
20. A passive—Solution for evil twin access point detection at public hotspots10.1002/dac.4460 ↗
21. Nicholson, A.J., Chawathe, Y., Chen, M.Y., Noble, B.D., and Wetherall, D. (2007, January 10–12). Improved access point selection. Proceedings of the 4th International Conference on Mobile Systems, Applications and Services, Singapore.10.1145/1134680.1134705 ↗
22. Pick quality over quantity: Expert feature selection and data pre-processing for 802.11 Intrusion Detection Systems10.1109/ACCESS.2022.3183597 ↗
23. Hlaing, W., Thepphaeng, S., Nontaboot, V., Tangsunantham, N., Sangsuwan, T., and Pira, C. (2017, January 8–10). Implementation of WiFi-based single phase smart meter for Internet of Things (IoT). Proceedings of the 2017 International Electrical Engineering Congress (iEECON), Pattaya, Thailand.10.1109/IEECON.2017.8075793 ↗
24. A Lightweight Rogue Access Point Detection Algorithm for Embedded Internet of Things (IoT) Devices
25. Mónica, D., and Ribeiro, C. (2011, January 12–14). Wifihop-mitigating the evil twin attack through multi-hop detection. Proceedings of the European Symposium on Research in Computer Security, Leuven, Belgium.10.1007/978-3-642-23822-2_2 ↗
26. Anmulwar, S., Srivastava, S., Mahajan, S.P., Gupta, A.K., and Kumar, V. (2014, January 27–28). Rogue access point detection methods: A review. Proceedings of the International Conference on Information Communication and Embedded Systems (ICICES2014), Chennai, India.10.1109/ICICES.2014.7034106 ↗
27. Client-side rogue access-point detection using a simple walking strategy and round-trip time analysis10.1186/s13638-020-01864-5 ↗
28. Rogue access point detection system in wireless lan
29. Agrawal, N., Pradeepkumar, B., and Tapaswi, S. (2013, January 26–28). Preventing ARP spoofing in WLAN using SHA-512. Proceedings of the 2013 IEEE International Conference on Computational Intelligence and Computing Research, Madurai, India.10.1109/ICCIC.2013.6724145 ↗
30. Lovinger, N., Gerlich, T., Martinasek, Z., and Malina, L. (2020, January 5–7). Detection of wireless fake access points. Proceedings of the 2020 12th International Congress on Ultra Modern Telecommunications and Control Systems and Workshops (ICUMT), Brno, Czech Republic.10.1109/ICUMT51630.2020.9222455 ↗
31. Orebaugh, A., Ramirez, G., and Beale, J. (2006). Wireshark & Ethereal Network Protocol Analyzer Toolkit, Elsevier.
32. High-speed TCP flow record extraction using GPUs10.1007/s11227-015-1478-9 ↗
33. Knoll, T. (2018). ‘Instant Karma’—Moral Decision Making Systems in Digital Games. Religions, 9.10.3390/rel9040131 ↗
34. Kuo, E.-C., Chang, M.-S., and Kao, D.-Y. (2018, January 11–14). User-side evil twin attack detection using time-delay statistics of TCP connection termination. Proceedings of the 2018 20th International Conference on Advanced Communication Technology (ICACT), Chuncheon-si, Korea.10.23919/ICACT.2018.8323699 ↗