信息安全研究 ›› 2018, Vol. 4 ›› Issue (2): 163-169.

• 学术论文 • 上一篇    下一篇

在智能家居环境下基于 CSI 的伪 AP 检测研究

冯鑫1,胡勇2   

  1. 1. 四川大学信息安全研究所
    2. 四川大学
  • 收稿日期:2018-02-25 出版日期:2018-02-15 发布日期:2018-02-25
  • 通讯作者: 冯鑫
  • 作者简介:冯鑫(1992—),硕士研究生,主要研究方向为无线安全、Web安全。 胡勇(1973—), 博士,副教授,主要研究方向为信息安全。

Research of Rogue AP Detection Based on CSI in Smart Home

  • Received:2018-02-25 Online:2018-02-15 Published:2018-02-25

摘要: 传统的伪AP检测方式都是基于AP的硬件特征和流量特征来检测,但是这两个特征都容易被攻击者伪造。本文针对在智能家居环境下,鉴于终端和网关的位置都比较稳定,提出一种基于信道状态信息(Channel State Information,CSI)的伪AP检测方法,将伪AP检测问题转化为AP位置检测问题。方法分为搜集阶段和检测阶段。搜集阶段,在安全环境下搜集目标AP的位置信息作为指纹并构建指纹库。在检测阶段,检测当前连接AP的位置信息,并将其与指纹库中的信息做对比,以此来判断当前AP的安全性。经过实验证明,此方法可行,并成功解决了传统的伪AP检测方法容易被绕过的问题。

关键词: 智能家居, CSI, 位置信息, 伪AP检测, 安全性

Abstract: Traditional Rogue AP detection methods are based on AP hardware fingerprint and traffic feature, but these two features are easy to be attacked by the attacker. In this paper, Aiming at the position of the terminal and the gateway is stable under the Smart Home environment,We proposed a CSI-based Rogue AP detection method. This method converted the detection of Rogue AP to the detection of the locations of AP.The method is divided into collection stage and detection stage. In the Collection stage, collecting the target AP location information as a fingerprint and build a fingerprint library in the security environment. In the detection stage,detecting the location information of the current connected AP and comparing with the information in the fingerprint library to determine the security of the current AP. Experiments show that this method is feasible and successfully solved the problem that the traditional Rogue AP detection method is easy to be bypassed.

Key words: Smart Home, CSI, location, Rogue AP detection, security