arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1801.09224cs.NI
收藏

利用蠕变波传播保护身体上的IoT装置

Securing On-Body IoT Devices By Exploiting Creeping Wave Propagation

Wei Wang, Lin Yang, Qian Zhang, Tao Jiang

阅读 PDF
arXiv 页面 ↗HTML 原文 ↗

摘要：

身体上的设备是物联网（IoT）愿景的一个固有组成部分，以提供以人为中心的服务。这些身体上的物联网设备主要是嵌入式设备，缺乏复杂的用户界面来促进传统的基于预共享密钥的安全协议。出于这个现实世界的安全漏洞，本文提出了SecureTag，一个系统，旨在通过集成物理层（PHY）信息与上层协议，以增加防御深度对主动攻击。SecureTag的基础是一种信号处理技术，可以提取爬行波的特殊传播特性来识别身体上的设备。在无意中听到可疑传输时，SecureTag会启动基于PHY的挑战-响应协议以减轻攻击。我们在不同的商用现成（COTS）可穿戴设备和智能手机上实施我们的系统。在实验室、公寓、商场和户外区域进行了广泛的实验，涉及12名不同年龄组的志愿者，以证明我们的系统的鲁棒性。结果表明，我们的系统可以减轻96.13%的主动攻击尝试，而触发错误警报只有5.64%的合法流量。

英文摘要：

On-body devices are an intrinsic part of the Internet-of-Things (IoT) vision to provide human-centric services. These on-body IoT devices are largely embedded devices that lack a sophisticated user interface to facilitate traditional Pre-Shared Key based security protocols. Motivated by this real-world security vulnerability, this paper proposes SecureTag, a system designed to add defense in depth against active attacks by integrating physical layer (PHY) information with upper-layer protocols. The underpinning of SecureTag is a signal processing technique that extracts the peculiar propagation characteristics of creeping waves to discern on-body devices. Upon overhearing a suspicious transmission, SecureTag initiates a PHY-based challenge-response protocol to mitigate attacks. We implement our system on different commercial off-the-shelf (COTS) wearables and a smartphone. Extensive experiments are conducted in a lab, apartments, malls, and outdoor areas, involving 12 volunteer subjects of different age groups, to demonstrate the robustness of our system. Results show that our system can mitigate 96.13% of active attack attempts while triggering false alarms on merely 5.64% of legitimate traffic.

机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。

↑