Ecole d'ingénieur et centre de recherche en Sciences du numérique

Physical-layer attacks on chirp-based ranging systems

Ranganathan, Aanjhan; Danev, Boris; Francillon, Aurélien; Capkun, Srdjan

WISEC 2012, 5th ACM Conference on Security and Privacy in Wireless and Mobile Networks, April 16-18, 2012, Tucson, Arizona, USA

Chirp signals have been extensively used in radar and sonar systems to determine distance, velocity and angular position of objects and in wireless communications as a spread spectrum technique to provide robustness and high processing gain. Recently, several standards have adopted chirp spread spectrum (CSS) as an underlying physical-layer scheme for precise, low-power and low-complexity real-time localization. While CSS-based ranging and localization solutions have been implemented and deployed, their security has so far not been analyzed.                               In this work, we analyze CSS-based ranging and localization systems. We focus on distance decreasing relay attacks that have proven detrimental for the security of proximity-based access control systems (e.g., passive vehicle keyless entry and start systems). We describe a set of distance decreasing attacks realizations and verify their feasibility by simulations and experiments on a commercial ranging system. Our results demonstrate that an attacker is able to effectively reduce the distance measured by chirp-based ranging systems from 150 m to 600 m depending on chirp configuration. Finally, we discuss possible countermeasures against these attacks.  

Document Doi Bibtex

Titre:Physical-layer attacks on chirp-based ranging systems
Mots Clés:Chirp, Ranging Systems, Physical-layer attacks
Type:Conférence
Langue:English
Ville:Tucson
Pays:ÉTATS-UNIS
Date:
Département:Sécurité numérique
Eurecom ref:3627
Copyright: © ACM, 2012. This is the author's version of the work. It is posted here by permission of ACM for your personal use. Not for redistribution. The definitive version was published in WISEC 2012, 5th ACM Conference on Security and Privacy in Wireless and Mobile Networks, April 16-18, 2012, Tucson, Arizona, USA http://dx.doi.org/10.1145/2185448.2185453
Bibtex: @inproceedings{EURECOM+3627, doi = {http://dx.doi.org/10.1145/2185448.2185453}, year = {2012}, title = {{P}hysical-layer attacks on chirp-based ranging systems }, author = {{R}anganathan, {A}anjhan and {D}anev, {B}oris and {F}rancillon, {A}ur{\'e}lien and {C}apkun, {S}rdjan}, booktitle = {{WISEC} 2012, 5th {ACM} {C}onference on {S}ecurity and {P}rivacy in {W}ireless and {M}obile {N}etworks, {A}pril 16-18, 2012, {T}ucson, {A}rizona, {USA}}, address = {{T}ucson, {\'{E}}{TATS}-{UNIS}}, month = {04}, url = {http://www.eurecom.fr/publication/3627} }
Voir aussi: