Why MAC address randomization is not enough: An analysis of Wi-Fi network discovery mechanisms

ASIA CCS 2016 - Proceedings of the 11th ACM Asia Conference on Computer and Communications Security

Volumn , Issue , 2016, Pages 413-424

  Vanhoef, Mathy ^a   Matte, Célestin ^b   Cunche, Mathieu ^b   Cardoso, Leonardo S ^b   Piessens, Frank ^a  

^a UNIVERSITY OF LEUVEN   (Belgium)

^b UNIVERSITÉ DE LYON   (France)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER OPERATING SYSTEMS; MOBILE DEVICES; MOBILE TELECOMMUNICATION SYSTEMS; RANDOM PROCESSES; TRACKING (POSITION); WIRELESS LOCAL AREA NETWORKS (WLAN);

ACCESS NETWORK; INFORMATION ELEMENTS; NOVEL TECHNIQUES; REAL-WORLD DATASETS; SEQUENCE NUMBER; TRACKING ALGORITHM; UNIQUE IDENTIFIERS; WI FI NETWORKS;

WI-FI;

EID: 84979666706     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2897845.2897883     Document Type: Conference Paper

References (47)

1. Tails - privacy for anyone anywhere. Retrieved from https://tails.boum.org.
2. Android 6.0 changes. Retrieved from https://developer.android.com/about/versions/ marshmallow/android-6.0-changes.html, 2015.
3. O. Abukmail. Wifi Mac Changer. Retrieved from https://play.google.com/store/apps/ details?id=com.wireless.macchanger.
4. M. V. Barbera, A. Epasto, A. Mei, S. Kosta, V. C. Perta, and J. Stefa. CRAWDAD dataset sapienza/probe-requests (v. 2013-09-10). Retrieved 10 November, 2015, from, http://crawdad.org/sapienza/ probe-requests/20130910, Sept. 2013.
5. B. Bloessl, M. Segata, C. Sommer, and F. Dressler. An IEEE 802.11 a/g/p OFDM receiver for GNU radio. In SRIF Workshop, 2013.
6. B. Bloessl, C. Sommer, F. Dressler, and D. Eckhoff. The scrambler attack: A robust physical layer attack on location privacy in vehicular networks. In ICNC, 2015.
7. V. Brik, S. Banerjee, M. Gruteser, and S. Oh. Wireless device identification with radiometric signatures. In MobiCom, 2008.
8. P. O. Carlos J. Bernardos, Juan Carlos Zúńiga. Wi-Fi internet connectivity and privacy: hiding your tracks on the wireless internet. In IEEE CSCN, 2015.
9. Chainfire. Pry-Fi. Retrieved from https://play.google.com/store/apps/ details?id=eu.chainfire.pryfi.
10. M. Cristea and B. Groza. Fingerprinting smartphones remotely via ICMP timestamps. Communications Letters, IEEE, 17(6):1081-1083, 2013.
11. D. A. Dai Zovi, S. Macaulay, et al. Attacking automatic wireless network selection. In Proc. of the Sixth Annual SMC Inf. Assurance Workshop, 2005.
12. B. Danev, D. Zanetti, and S. Capkun. On physical-layer identification of wireless devices. ACM Computing Surveys (CSUR), 45(1):6, 2012.
13. C. Daniel and W. Glenn. Snoopy: Distributed tracking and profiling framework. In 44Con 2012, 2012.
14. L. Demir, M. Cunche, and C. Lauradoux. Analysing the privacy policies of Wi-Fi trackers. In Proc. of the 2014 workshop on physical analytics, 2014.
15. L. C. C. Desmond, C. C. Yuan, T. C. Pheng, and R. S. Lee. Identifying unique devices through wireless fingerprinting. In WiSec, 2008.
16. P. Eckersley. How unique is your web browser? In Privacy Enhancing Technologies, 2010.
17. J. Franklin, D. McCoy, P. Tabriz, V. Neagoe, J. V. Randwyk, and D. Sicker. Passive data link layer 802.11 wireless device driver fingerprinting. In USENIX Security, 2006.
18. J. Freudiger. How talkative is your mobile device? An experimental study of Wi-Fi probe requests. In WiSec, 2015.
19. B. Gellman and A. Soltani. NSA tracking cellphone locations worldwide, Snowden documents show. The Washington Post, 2013.
20. M. X. Gong, B. Hart, L. Xia, and R. Want. Channel bounding and MAC protection mechanisms for 802.11ac. In GLOBECOM, 2011.
21. F. Gont. A method for generating semantically opaque interface identifiers with ipv6 stateless address autoconfiguration (slaac). RFC 7217, 2014.
22. D. Goodin. No, this isn't a scene from minority report. This trash can is stalking you. Ars Technica, 2013.
23. B. Greenstein, R. Gummadi, J. Pang, M. Y. Chen, T. Kohno, S. Seshan, and D. Wetherall. Can Ferris Bueller still have his day off? protecting privacy in the wireless era. In USENIX HotOS, 2007.
24. E. Grumbach. iwlwifi: mvm: support random MAC address for scanning. Linux commit effd05ac479b.
25. M. Gruteser and D. Grunwald. Enhancing location privacy in wireless LAN through disposable interface identifiers: A quantitative analysis. Mobile Networks and Applications, 10(3):315-325, 2005.
26. F. Guo and T. Chiueh. Sequence number-based MAC address spoof detection. In RAID, 2006.
27. C. Huitema. Experience with MAC address randomization in Windows 10. In 93th Internet Engineering Task Force Meeting (IETF), July 2015.
28. C. Huitema. Personal communication, Nov. 2015.
29. M. Humbert, M. H. Manshaei, J. Freudiger, and J.-P. Hubaux. Tracking games in mobile networks. In Conf. on Decision and Game Theory for Security, 2010.
30. N. Husted and S. Myers. Mobile location tracking in metro areas: Malnets and others. In CCS, 2010.
31. IEEE Std 802.11-2012. Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications, 2012.
32. IEEE Std 802.11u. Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications: Amendment 9: Interworking with External Networks, 2011.
33. S. Jana and S. K. Kasera. On fast and accurate detection of unauthorized wireless access points using clock skews. In MobiCom, 2008.
34. P. Leach, M. Mealling, and R. Salz. A universally unique identifier (UUID) URN namespace. RFC 4122 (Proposed Standard), July 2005.
35. J. Lindqvist, T. Aura, G. Danezis, T. Koponen, A. Myllyniemi, J. Maki, and M. Roe. Privacy-preserving 802.11 access-point discovery. In WiSec, 2009.
36. B. Misra. iOS 8 MAC randomization - analyzed! http://blog.airtightnetworks.com/ios8-mac-randomization-analyzed/.
37. A. B. M. Musa and J. Eriksson. Tracking unmodified smartphones using Wi-Fi monitors. In SenSys, 2012.
38. B. O'Connor. CreepyDOL: Cheap, distributed stalking. In BlackHat, 2013.
39. J. Pang, B. Greenstein, R. Gummadi, S. Seshan, and D. Wetherall. 802.11 user fingerprinting. In MobiCom, 2007.
40. J. Pang, B. Greenstein, S. Seshan, and D. Wetherall. Tryst: The case for confidential service discovery. In HotNets, 2007.
41. J. Scahill and G. Greenwald. The NSA's secret role in the U.S. assassination program. The Intercept, 2014.
42. K. Skinner and J. Novak. Privacy and your app. In Apple Worldwide Dev. Conf. (WWDC), June 2015.
43. T. Sẗober, M. Frank, J. Schmitt, and I. Martinovic. Who do you sync you are?: smartphone fingerprinting via application behaviour. In WiSec, 2013.
44. L. Wang and C. Tellambura. An overview of peak-to-average power ratio reduction techniques for OFDM systems. In IEEE ISSPIT, 2006.
45. W. Wang. Wireless networking in Windows 10. In Windows Hardware Engineering Community conference (WinHEC), Mar. 2015.
46. Wi-Fi Alliance. Hotspot 2.0 (Release 2) Technical Specification v1.1.0, 2010.
47. Wi-Fi Alliance. Wi-Fi Simple Configuration Protocol and Usability Best Practices for the Wi-Fi Protected Setup Program, v2.0.1, April 2011.