Advanced Wi-Fi attacks using commodity hardware
Authors:
Open Access
- 8 December 2014
- conference paper
- Published by Association for Computing Machinery (ACM)
- p. 256-265
Abstract
We show that low-layer attacks against Wi-Fi can be implemented using user-modifiable firmware. Hence cheap off-the-shelf Wi-Fi dongles can be used carry out advanced attacks. We demonstrate this by implementing five low-layer attacks using open source Atheros firmware. The first attack consists of unfair channel usage, giving the user a higher throughput while reducing that of others. The second attack defeats countermeasures designed to prevent unfair channel usage. The third attack performs continuous jamming, making the channel unusable for other devices. For the fourth attack we implemented a selective jammer, allowing one to jam specific frames already in the air. The fifth is a novel channel-based Man-in-the-Middle (MitM) attack, enabling reliable manipulation of encrypted traffic. These low-layer attacks facilitate novel attacks against higher-layer protocols. To demonstrate this we show how our MitM attack facilitates attacks against the Temporal Key Integrity Protocol (TKIP) when used as a group cipher. Since a substantial number of networks still use TKIP as their group cipher, this shows that weaknesses in TKIP have a higher impact than previously thought.Keywords
Funding Information
- Fonds Wetenschappelijk Onderzoek
This publication has 23 references indexed in Scilit:
- Practical verification of WPA-TKIP vulnerabilities2013
- Carving secure wi-fi zones with defensive jamming2012
- Falsification Attacks against WPA-TKIP in a Realistic EnvironmentIEICE Transactions on Information and Systems, 2012
- WiFire2011
- Tool releaseACM SIGCOMM Computer Communication Review, 2011
- Statistical Attack on RC4Lecture Notes in Computer Science, 2011
- Cryptanalysis for RC4 and Breaking WEP/WPA-TKIPIEICE Transactions on Information and Systems, 2011
- An Improved Attack on TKIPLecture Notes in Computer Science, 2009
- An experimental study on the capture effect in 802.11a networks2007
- Weaknesses in the temporal key hash of WPAACM SIGMOBILE Mobile Computing and Communications Review, 2004