Skip to Main content Skip to Navigation
Preprints, Working Papers, ...

Ranging and Location attacks on 802.11 FTM

Jerome Henry 1 Yann Busnel 2, 3 Romaric Ludinard 4, 3 Nicolas Montavont 5, 3
2 DIONYSOS - Dependability Interoperability and perfOrmance aNalYsiS Of networkS
Inria Rennes – Bretagne Atlantique , IRISA-D2 - RÉSEAUX, TÉLÉCOMMUNICATION ET SERVICES
4 ADOPNET - Advanced technologies for operated networks
UR1 - Université de Rennes 1, IRISA-D2 - RÉSEAUX, TÉLÉCOMMUNICATION ET SERVICES, IMT Atlantique - IMT Atlantique Bretagne-Pays de la Loire
5 OCIF - Objets communicants pour l'Internet du futur
IMT Atlantique - IMT Atlantique Bretagne-Pays de la Loire, IRISA-D2 - RÉSEAUX, TÉLÉCOMMUNICATION ET SERVICES
Abstract : 802.11 Fine Timing Measurement is an indoor ranging technique. Because it is unauthenticated and unprotected, our experiments indicate that an adversary can implement ranging and location attacks, by inserting one or more rogue responders and causing an unsuspecting client to incorporate forged values into its location computation. FTM clients tend to a small set of responders to range against (top 3 to 6 responders with strongest signal). Once ranges have been collected, the client can compute its location using various techniques, such as 3-sphere intersection, matrix error minimization techniques or Kalman filter. Regardless of the technique in use, we show in this paper that an attacker can cause a ranging client to deviate from its intended path. We also show that protection intended for attacks on comparable ranging techniques, like GPS, are ineffective in the case of FTM.
Keywords : FTM 802.11az location
Complete list of metadata

https://hal-imt-atlantique.archives-ouvertes.fr/hal-03241630
Contributor : Yann Busnel <>
Submitted on : Friday, May 28, 2021 - 6:10:54 PM
Last modification on : Wednesday, July 21, 2021 - 7:40:02 AM
Long-term archiving on: : Sunday, August 29, 2021 - 7:47:29 PM

File

802_11az_GPS_attack_pimrc-6.pd...
Files produced by the author(s)

Identifiers

  • HAL Id : hal-03241630, version 1

Citation

Jerome Henry, Yann Busnel, Romaric Ludinard, Nicolas Montavont. Ranging and Location attacks on 802.11 FTM. 2021. ⟨hal-03241630⟩

Share

Metrics

Record views

34

Files downloads

12