基于信道状态信息的无线设备指纹建模方案

发布时间：2018-05-25 16:28

本文选题：设备指纹 + 攻击检测　；参考：《南京大学》2017年硕士论文

【摘要】：在无线网络中,由于无线接入点和接入设备之间缺乏强制有效的认证机制,虚假接入点和网络搭便车已经成为无线网络中两种广为人知的安全威胁。拿虚假接入点来说,接入设备要想避免这类攻击就需要对接入点的身份进行确认,仅仅用密码的方式并不足以作为身份认证的依据,通常接入点还需要事先安装一个可以被接入设备信任的数字证书。这意味着要引入公钥基础设施或是预先建立信任关系(例如对证书事先做线下分发),然而由于改造成本等各方面的原因,没有一种方式得到过广泛使用。而在这些密码学的方案得到广泛部署之前,仍然需要一些易于部署的技术方案来缓和这一问题。本文提出了一种非密码学的解决方案来建立无线设备和接入设备间的认证机制。这一方案可以在对网卡驱动进行一定修改的基础上方便地部署在现有的终端设备上(例如手机和笔记本),而不需要对无线接入点或是其他网络设施做任何硬件上的改造。本文提出了一种从无线设备网卡中的信道状态信息(CSI)推算出设备之间的载波频率偏移(CFO)的方法,并用载波频率偏移作为设备指纹来识别不同的无线设备,这一过程完全不需要借助任何额外的硬件设施。载波频率偏移产生于无线设备的振荡器误差,对于无线设备来说这是一项难以被伪造的物理特征。对于同一设备这一特征能保持长期稳定,而对于不同的设备则具有显著差异。本文进行了大量的实验来评估方案的有效性,对23台手机和30台路由器(包括同品牌和不同品牌)在各类场景下进行了测试。结果显示,针对虚假接入点和网络搭便车两种身份伪造攻击,本文所提方案的检测率高达94%。
[Abstract]:In wireless networks, due to the lack of mandatory and effective authentication mechanism between wireless access points and access devices, false access points and network hitchhiking have become two well-known security threats in wireless networks. In the case of a fake access point, the access device needs to confirm the identity of the access point to avoid such an attack, and the mere use of a password is not sufficient as a basis for identity authentication. Typically, access points also need to install a digital certificate that can be trusted by the access device in advance. This means introducing public key infrastructure or establishing trust relationships in advance (such as offline distribution of certificates, etc.), but none of them have been widely used due to the cost of transformation and other reasons. Before these cryptographic schemes are widely deployed, some easy-to-deploy technical solutions are still needed to ease the problem. This paper presents a non-cryptographic solution to establish the authentication mechanism between wireless devices and access devices. This scheme can be easily deployed on existing terminal devices (such as mobile phones and laptops) on the basis of some modifications to the network card drivers without any hardware modification of wireless access points or other network facilities. This paper presents a method to calculate the carrier frequency offset (CFO) between devices from the channel state information (CSI) in the wireless device network card. The carrier frequency offset is used as the device fingerprint to identify different wireless devices. This process does not require any additional hardware facilities. Carrier frequency offset is caused by the oscillator error of wireless device, which is a physical feature which is difficult to be forged for wireless device. For the same equipment, this feature can remain stable for a long time, but for different equipment, there are significant differences. In this paper, a large number of experiments were conducted to evaluate the effectiveness of the scheme. 23 mobile phones and 30 routers (including the same brand and different brands) were tested in various scenarios. The results show that the detection rate of the proposed scheme is as high as 94.
【学位授予单位】：南京大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TN92;TN915.08

【相似文献】