In January, Skyhook Wireless Inc. announced that Apple would use Skyhook’s WiFi Positioning System (WPS) for its popular Map applications. The WPS database contains information on access points throughout the world. Skyhook itself provides most of the data in the database, with users contributing via direct entries to the database, and requests for localization. ETH Zurich Professor Srdjan Capkun of the Department of Computer Science and his team of researchers analysed the security of Skyhook’s positioning system. The team’s results demonstrate the vulnerability of Skyhook’s and similar public WLAN positioning systems to location spoofing attacks.
Impersonation and elimination
When an Apple iPod or iPhone wants to find its position, it detects its neighbouring access points, and sends this information to Skyhook servers. The servers then return the access point locations to the device. Based on this data, the device computes its location. To attack this localization process, Professor Capkun’s team decided to use a dual approach. First, access points from a known remote location were impersonated. Second, signals sent by access points in the vicinity were eliminated by jamming. These actions created the illusion in localized devices that their locations were different from their actual physical locations.
Skyhook’s WPS works by requiring a device to report the Media Access Control (MAC) addresses that it detects. However, since MAC addresses can be forged by rogue access points, they can be easily impersonated. Furthermore, access point signals can be jammed and signals from access points in the vicinity of the device can thus be eliminated. These two actions make location spoofing attacks possible.
Professor Capkun explained that by demonstrating these attacks, the team hoped to point out the limitations, despite guarantees, of public WLAN-based localization services as well as of applications for such services. He said «Given the relative simplicity of the performed attacks, it is clear that the use of WLAN-based public localization systems, such as Skyhook’s WPS, should be restricted in security and safety-critical applications.»
Srdjan Capkun | EurekAlert!
Research alliance: TRUMPF and Fraunhofer IPA ramping up artificial intelligence for industrial use
06.08.2020 | Fraunhofer-Institut für Produktionstechnik und Automatisierung IPA
Novel approach improves graphene-based supercapacitors
03.08.2020 | University of Technology Sydney
Scientists at the Fraunhofer Institute for Laser Technology ILT have come up with a striking new addition to contact stamping technologies in the ERDF research project ScanCut. In collaboration with industry partners from North Rhine-Westphalia, the Aachen-based team of researchers developed a hybrid manufacturing process for the laser cutting of thin-walled metal strips. This new process makes it possible to fabricate even the tiniest details of contact parts in an eco-friendly, high-precision and efficient manner.
Plug connectors are tiny and, at first glance, unremarkable – yet modern vehicles would be unable to function without them. Several thousand plug connectors...
An international research team has found a new approach that may be able to reduce bone loss in osteoporosis and maintain bone health.
Osteoporosis is the most common age-related bone disease which affects hundreds of millions of individuals worldwide. It is estimated that one in three women...
Traditional single-cell sequencing methods help to reveal insights about cellular differences and functions - but they do this with static snapshots only...
“Core-shell” clusters pave the way for new efficient nanomaterials that make catalysts, magnetic and laser sensors or measuring devices for detecting electromagnetic radiation more efficient.
Whether in innovative high-tech materials, more powerful computer chips, pharmaceuticals or in the field of renewable energies, nanoparticles – smallest...
An international research team with Prof. Cornelia Denz from the Institute of Applied Physics at the University of Münster develop for the first time light fields using caustics that do not change during propagation. With the new method, the physicists cleverly exploit light structures that can be seen in rainbows or when light is transmitted through drinking glasses.
Modern applications as high resolution microsopy or micro- or nanoscale material processing require customized laser beams that do not change during...
23.07.2020 | Event News
21.07.2020 | Event News
07.07.2020 | Event News
06.08.2020 | Earth Sciences
06.08.2020 | Power and Electrical Engineering
06.08.2020 | Life Sciences