Forum for Science, Industry and Business

Sponsored by:     3M 
Search our Site:

 

Location spoofing possible with WiFi devices

15.04.2008
Positioning system used by iPhone/iPod breached

In January, Skyhook Wireless Inc. announced that Apple would use Skyhook’s WiFi Positioning System (WPS) for its popular Map applications. The WPS database contains information on access points throughout the world. Skyhook itself provides most of the data in the database, with users contributing via direct entries to the database, and requests for localization. ETH Zurich Professor Srdjan Capkun of the Department of Computer Science and his team of researchers analysed the security of Skyhook’s positioning system. The team’s results demonstrate the vulnerability of Skyhook’s and similar public WLAN positioning systems to location spoofing attacks.

Impersonation and elimination

When an Apple iPod or iPhone wants to find its position, it detects its neighbouring access points, and sends this information to Skyhook servers. The servers then return the access point locations to the device. Based on this data, the device computes its location. To attack this localization process, Professor Capkun’s team decided to use a dual approach. First, access points from a known remote location were impersonated. Second, signals sent by access points in the vicinity were eliminated by jamming. These actions created the illusion in localized devices that their locations were different from their actual physical locations.

Simple falsification

Skyhook’s WPS works by requiring a device to report the Media Access Control (MAC) addresses that it detects. However, since MAC addresses can be forged by rogue access points, they can be easily impersonated. Furthermore, access point signals can be jammed and signals from access points in the vicinity of the device can thus be eliminated. These two actions make location spoofing attacks possible.

Compromised usage

Professor Capkun explained that by demonstrating these attacks, the team hoped to point out the limitations, despite guarantees, of public WLAN-based localization services as well as of applications for such services. He said «Given the relative simplicity of the performed attacks, it is clear that the use of WLAN-based public localization systems, such as Skyhook’s WPS, should be restricted in security and safety-critical applications.»

Srdjan Capkun | EurekAlert!
Further information:
http://www.ethz.ch
http://www.syssec.ch/press/location-spoofing-attacks-on-the-iphone-and-ipod

More articles from Information Technology:

nachricht Research alliance: TRUMPF and Fraunhofer IPA ramping up artificial intelligence for industrial use
06.08.2020 | Fraunhofer-Institut für Produktionstechnik und Automatisierung IPA

nachricht Novel approach improves graphene-based supercapacitors
03.08.2020 | University of Technology Sydney

All articles from Information Technology >>>

The most recent press releases about innovation >>>

Die letzten 5 Focus-News des innovations-reports im Überblick:

Im Focus: ScanCut project completed: laser cutting enables more intricate plug connector designs

Scientists at the Fraunhofer Institute for Laser Technology ILT have come up with a striking new addition to contact stamping technologies in the ERDF research project ScanCut. In collaboration with industry partners from North Rhine-Westphalia, the Aachen-based team of researchers developed a hybrid manufacturing process for the laser cutting of thin-walled metal strips. This new process makes it possible to fabricate even the tiniest details of contact parts in an eco-friendly, high-precision and efficient manner.

Plug connectors are tiny and, at first glance, unremarkable – yet modern vehicles would be unable to function without them. Several thousand plug connectors...

Im Focus: New Strategy Against Osteoporosis

An international research team has found a new approach that may be able to reduce bone loss in osteoporosis and maintain bone health.

Osteoporosis is the most common age-related bone disease which affects hundreds of millions of individuals worldwide. It is estimated that one in three women...

Im Focus: AI & single-cell genomics

New software predicts cell fate

Traditional single-cell sequencing methods help to reveal insights about cellular differences and functions - but they do this with static snapshots only...

Im Focus: TU Graz Researchers synthesize nanoparticles tailored for special applications

“Core-shell” clusters pave the way for new efficient nanomaterials that make catalysts, magnetic and laser sensors or measuring devices for detecting electromagnetic radiation more efficient.

Whether in innovative high-tech materials, more powerful computer chips, pharmaceuticals or in the field of renewable energies, nanoparticles – smallest...

Im Focus: Tailored light inspired by nature

An international research team with Prof. Cornelia Denz from the Institute of Applied Physics at the University of Münster develop for the first time light fields using caustics that do not change during propagation. With the new method, the physicists cleverly exploit light structures that can be seen in rainbows or when light is transmitted through drinking glasses.

Modern applications as high resolution microsopy or micro- or nanoscale material processing require customized laser beams that do not change during...

All Focus news of the innovation-report >>>

Anzeige

Anzeige

VideoLinks
Industry & Economy
Event News

“Conference on Laser Polishing – LaP 2020”: The final touches for surfaces

23.07.2020 | Event News

Conference radar for cybersecurity

21.07.2020 | Event News

Contact Tracing Apps against COVID-19: German National Academy Leopoldina hosts international virtual panel discussion

07.07.2020 | Event News

 
Latest News

Rare Earth Elements in Norwegian Fjords?

06.08.2020 | Earth Sciences

Anode material for safe batteries with a long cycle life

06.08.2020 | Power and Electrical Engineering

Turning carbon dioxide into liquid fuel

06.08.2020 | Life Sciences

VideoLinks
Science & Research
Overview of more VideoLinks >>>