Graduate School and Research Center in Digital Sciences

Improving 802.11 fingerprinting of similar devices by cooperative fingerprinting

Maurice, Clémentine; Onno, Stéphane; Neumann, Christoph; Heen, Olivier; Francillon, Aurélien

SECRYPT 2013, 10th International Conference on Security and Cryptography, 29-31 July 2013, Reykjavik, Iceland

Fingerprinting 802.11 devices has been proposed to identify devices in order to mitigate IEEE 802.11 weaknesses. However, important limitations prevent any real deployment. On the first hand, fingerprinting has a low accuracy when the devices have similar hardware and software. On the second hand, attackers may forge signatures to impersonate devices. We propose Diversity, a cooperative fingerprinting approach that improves accuracy of existing fingerprinting methods while relying only on off-the-shelf hardware. Diversity improves fingerprinting up to the reliable individual identification of identical 802.11 devices. This approach modifies the signature of devices by modifying slightly their traffic attributes. We evaluate Diversity with both a simulation and an implementation, achieving a false positive rate of 0% with a dataset including identical devices. Finally, we complement Diversity by mechanisms for detecting attackers that try to forge signatures.

Document Bibtex

Title:Improving 802.11 fingerprinting of similar devices by cooperative fingerprinting
Keywords:802.11 Fingerprinting, Wireless Network Security, Anti-Forgery
Type:Conference
Language:English
City:Reykjavik
Country:ICELAND
Date:
Department:Digital Security
Eurecom ref:4035
Copyright: © Springer. Personal use of this material is permitted. The definitive version of this paper was published in SECRYPT 2013, 10th International Conference on Security and Cryptography, 29-31 July 2013, Reykjavik, Iceland and is available at :
Bibtex: @inproceedings{EURECOM+4035, year = {2013}, title = {{I}mproving 802.11 fingerprinting of similar devices by cooperative fingerprinting}, author = {{M}aurice, {C}l{\'e}mentine and {O}nno, {S}t{\'e}phane and {N}eumann, {C}hristoph and {H}een, {O}livier and {F}rancillon, {A}ur{\'e}lien}, booktitle = {{SECRYPT} 2013, 10th {I}nternational {C}onference on {S}ecurity and {C}ryptography, 29-31 {J}uly 2013, {R}eykjavik, {I}celand }, address = {{R}eykjavik, {ICELAND}}, month = {07}, url = {http://www.eurecom.fr/publication/4035} }
See also: