Ranging and Location attacks on 802.11 FTM - IMT Atlantique Accéder directement au contenu
Communication Dans Un Congrès Année : 2021

Ranging and Location attacks on 802.11 FTM

Résumé

802.11 Fine Timing Measurement is an indoor ranging technique. Because it is unauthenticated and unprotected, our experiments indicate that an adversary can implement ranging and location attacks, causing an unsuspecting client to incorporate forged values into its location computation. FTM clients tend to range against a small set of responders (top 3 to 6 responders with strongest signal). Once ranges have been collected, the client can compute its location using various techniques, such as 3-sphere intersection, matrix error minimization techniques or Kalman filter. Irrespective of the technique, we show in this paper that an attacker can cause a ranging client to deviate from its intended path, which can have dire consequences in some settings (e.g., automatic shuttle in public venue causing damages). We also show that protection intended for attacks on comparable ranging techniques, like GPS, are ineffective in the case of FTM.
Fichier principal
Vignette du fichier
1570711821.pdf (2.72 Mo) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03265600 , version 1 (28-05-2021)
hal-03265600 , version 2 (21-06-2021)

Identifiants

Citer

Jerome Henry, Yann Busnel, Romaric Ludinard, Nicolas Montavont. Ranging and Location attacks on 802.11 FTM. PIMRC 2021: IEEE 32nd Annual International Symposium on Personal, Indoor and Mobile Radio Communications, Sep 2021, Oulu, Finland. pp.1-6, ⟨10.1109/PIMRC50174.2021.9569340⟩. ⟨hal-03265600v2⟩
176 Consultations
262 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More