City-Hunter: Hunting Smartphones in Urban Areas

Xuefeng Liu; Jiaqi Wen; Shaojie Tang; Jiannong Cao; Jiaxing Shen

doi:10.1109/ICDCS.2017.148

City-Hunter: Hunting Smartphones in Urban Areas

Xuefeng Liu, Jiaqi Wen, Shaojie Tang, Jiannong Cao, Jiaxing Shen

Research output: Chapter in book / Conference proceeding › Conference article published in proceeding or book › Academic research › peer-review

2 Citations (Scopus)

Abstract

The security issue of public WiFi is gaining more and more concern. By listening to probe requests, an adversary can obtain the SSID list of the APs to which a smartphone previously connected, and utilizes this information to trick the smartphone into associating to it. However, with the enhancement of security level, most smartphones now do not proactively disclose their SSID lists, making these attacks obsolete. In this paper, we propose City-Hunter, an attacker that can lure nearby smartphones without knowing their SSID information. City-Hunter establishes and maintains an SSID database by integrating both offline and online information. Meanwhile, it smartly chooses some SSIDs to hit a smartphone according to the past record and freshness. We evaluate the performance of City-Hunter in different public places. The results demonstrate that City-Hunter is able to successfully hit 12% ∼ 18% smartphones without knowing their SSID information, which is about 4 ∼ 8 times improvement compared to the similar attacks like KARMA and MANA.

Original language	English
Title of host publication	Proceedings - IEEE 37th International Conference on Distributed Computing Systems, ICDCS 2017
Publisher	IEEE
Pages	162-171
Number of pages	10
ISBN (Electronic)	9781538617915
DOIs	https://doi.org/10.1109/ICDCS.2017.148
Publication status	Published - 13 Jul 2017
Event	37th IEEE International Conference on Distributed Computing Systems, ICDCS 2017 - J.W. Marriott Hotel, Atlanta, United States Duration: 5 Jun 2017 → 8 Jun 2017

Conference

Conference	37th IEEE International Conference on Distributed Computing Systems, ICDCS 2017
Country/Territory	United States
City	Atlanta
Period	5/06/17 → 8/06/17

ASJC Scopus subject areas

Software
Hardware and Architecture
Computer Networks and Communications

More information

10.1109/ICDCS.2017.148

Cite this

@inproceedings{3e4e7f61110c46e69fa94af6f2c2b1c4,

title = "City-Hunter: Hunting Smartphones in Urban Areas",

abstract = "The security issue of public WiFi is gaining more and more concern. By listening to probe requests, an adversary can obtain the SSID list of the APs to which a smartphone previously connected, and utilizes this information to trick the smartphone into associating to it. However, with the enhancement of security level, most smartphones now do not proactively disclose their SSID lists, making these attacks obsolete. In this paper, we propose City-Hunter, an attacker that can lure nearby smartphones without knowing their SSID information. City-Hunter establishes and maintains an SSID database by integrating both offline and online information. Meanwhile, it smartly chooses some SSIDs to hit a smartphone according to the past record and freshness. We evaluate the performance of City-Hunter in different public places. The results demonstrate that City-Hunter is able to successfully hit 12% ∼ 18% smartphones without knowing their SSID information, which is about 4 ∼ 8 times improvement compared to the similar attacks like KARMA and MANA.",

author = "Xuefeng Liu and Jiaqi Wen and Shaojie Tang and Jiannong Cao and Jiaxing Shen",

year = "2017",

month = jul,

day = "13",

doi = "10.1109/ICDCS.2017.148",

language = "English",

pages = "162--171",

booktitle = "Proceedings - IEEE 37th International Conference on Distributed Computing Systems, ICDCS 2017",

publisher = "IEEE",

address = "United States",

note = "37th IEEE International Conference on Distributed Computing Systems, ICDCS 2017 ; Conference date: 05-06-2017 Through 08-06-2017",

}

Liu, X, Wen, J, Tang, S, Cao, J & Shen, J 2017, City-Hunter: Hunting Smartphones in Urban Areas. in Proceedings - IEEE 37th International Conference on Distributed Computing Systems, ICDCS 2017., 7979964, IEEE, pp. 162-171, 37th IEEE International Conference on Distributed Computing Systems, ICDCS 2017, Atlanta, United States, 5/06/17. https://doi.org/10.1109/ICDCS.2017.148

City-Hunter: Hunting Smartphones in Urban Areas. / Liu, Xuefeng; Wen, Jiaqi; Tang, Shaojie et al.
Proceedings - IEEE 37th International Conference on Distributed Computing Systems, ICDCS 2017. IEEE, 2017. p. 162-171 7979964.

Research output: Chapter in book / Conference proceeding › Conference article published in proceeding or book › Academic research › peer-review

TY - GEN

T1 - City-Hunter: Hunting Smartphones in Urban Areas

AU - Liu, Xuefeng

AU - Wen, Jiaqi

AU - Tang, Shaojie

AU - Cao, Jiannong

AU - Shen, Jiaxing

PY - 2017/7/13

Y1 - 2017/7/13

N2 - The security issue of public WiFi is gaining more and more concern. By listening to probe requests, an adversary can obtain the SSID list of the APs to which a smartphone previously connected, and utilizes this information to trick the smartphone into associating to it. However, with the enhancement of security level, most smartphones now do not proactively disclose their SSID lists, making these attacks obsolete. In this paper, we propose City-Hunter, an attacker that can lure nearby smartphones without knowing their SSID information. City-Hunter establishes and maintains an SSID database by integrating both offline and online information. Meanwhile, it smartly chooses some SSIDs to hit a smartphone according to the past record and freshness. We evaluate the performance of City-Hunter in different public places. The results demonstrate that City-Hunter is able to successfully hit 12% ∼ 18% smartphones without knowing their SSID information, which is about 4 ∼ 8 times improvement compared to the similar attacks like KARMA and MANA.

AB - The security issue of public WiFi is gaining more and more concern. By listening to probe requests, an adversary can obtain the SSID list of the APs to which a smartphone previously connected, and utilizes this information to trick the smartphone into associating to it. However, with the enhancement of security level, most smartphones now do not proactively disclose their SSID lists, making these attacks obsolete. In this paper, we propose City-Hunter, an attacker that can lure nearby smartphones without knowing their SSID information. City-Hunter establishes and maintains an SSID database by integrating both offline and online information. Meanwhile, it smartly chooses some SSIDs to hit a smartphone according to the past record and freshness. We evaluate the performance of City-Hunter in different public places. The results demonstrate that City-Hunter is able to successfully hit 12% ∼ 18% smartphones without knowing their SSID information, which is about 4 ∼ 8 times improvement compared to the similar attacks like KARMA and MANA.

UR - http://www.scopus.com/inward/record.url?scp=85027246447&partnerID=8YFLogxK

U2 - 10.1109/ICDCS.2017.148

DO - 10.1109/ICDCS.2017.148

M3 - Conference article published in proceeding or book

SP - 162

EP - 171

BT - Proceedings - IEEE 37th International Conference on Distributed Computing Systems, ICDCS 2017

PB - IEEE

T2 - 37th IEEE International Conference on Distributed Computing Systems, ICDCS 2017

Y2 - 5 June 2017 through 8 June 2017

ER -

City-Hunter: Hunting Smartphones in Urban Areas

Abstract

Conference

ASJC Scopus subject areas

More information

Other files and links

Fingerprint

Cite this