Truong, Hien Thi Thu and Toivonen, Juhani and Nguyen, Thien Duc and Soriente, Claudio and Tarkoma, Sasu and Asokan, N. (2019):
DoubleEcho: Mitigating Context-Manipulation Attacks in Copresence Verification.
k.A., IEEE International Conference on Pervasive Computing and Communications (PerCom2019), Kyoto, Japan, March 2019, [Conference or Workshop Item]
Abstract
Copresence verification based on context can improve usability and strengthen security of many authentication and access control systems. By sensing and comparing their surroundings, two or more devices can tell whether they are copresent and use such information to make access control decisions. To the best of our knowledge, all context-based copresence verification mechanisms to date are susceptible to context-manipulation attacks. In such attacks, a distributed adversary replicates the same context at the (different) locations of the victim devices, and induces them to conclude that they are copresent. In this paper we propose DoubleEcho, a copresence verification scheme based on acoustic Room Impulse Response (RIR) that mitigates context-manipulation attacks. In DoubleEcho, one device emits a short, wide-band audible chirp and all participating devices record reflections of the chirp from the surrounding environment. Since RIR is, by its very nature, dependent on the physical surroundings, it constitutes a unique location signature that is hard for an adversary to replicate. We evaluate DoubleEcho by collecting RIR data with various mobile devices and in different locations. DoubleEcho exhibits robustness to context-manipulation attacks with a false positive rate can be as low as 0.089, whereas all other approaches to date are entirely vulnerable to such attacks. The false negative rate can be as low as 0.021. DoubleEcho detects copresence (or lack thereof) in roughly 2 seconds and works on commodity devices.
Item Type: | Conference or Workshop Item |
---|---|
Erschienen: | 2019 |
Creators: | Truong, Hien Thi Thu and Toivonen, Juhani and Nguyen, Thien Duc and Soriente, Claudio and Tarkoma, Sasu and Asokan, N. |
Title: | DoubleEcho: Mitigating Context-Manipulation Attacks in Copresence Verification |
Language: | English |
Abstract: | Copresence verification based on context can improve usability and strengthen security of many authentication and access control systems. By sensing and comparing their surroundings, two or more devices can tell whether they are copresent and use such information to make access control decisions. To the best of our knowledge, all context-based copresence verification mechanisms to date are susceptible to context-manipulation attacks. In such attacks, a distributed adversary replicates the same context at the (different) locations of the victim devices, and induces them to conclude that they are copresent. In this paper we propose DoubleEcho, a copresence verification scheme based on acoustic Room Impulse Response (RIR) that mitigates context-manipulation attacks. In DoubleEcho, one device emits a short, wide-band audible chirp and all participating devices record reflections of the chirp from the surrounding environment. Since RIR is, by its very nature, dependent on the physical surroundings, it constitutes a unique location signature that is hard for an adversary to replicate. We evaluate DoubleEcho by collecting RIR data with various mobile devices and in different locations. DoubleEcho exhibits robustness to context-manipulation attacks with a false positive rate can be as low as 0.089, whereas all other approaches to date are entirely vulnerable to such attacks. The false negative rate can be as low as 0.021. DoubleEcho detects copresence (or lack thereof) in roughly 2 seconds and works on commodity devices. |
Place of Publication: | k.A. |
Uncontrolled Keywords: | Primitives; P3 |
Divisions: | 20 Department of Computer Science 20 Department of Computer Science > System Security Lab DFG-Collaborative Research Centres (incl. Transregio) DFG-Collaborative Research Centres (incl. Transregio) > Collaborative Research Centres Profile Areas Profile Areas > Cybersecurity (CYSEC) DFG-Collaborative Research Centres (incl. Transregio) > Collaborative Research Centres > CRC 1119: CROSSING – Cryptography-Based Security Solutions: Enabling Trust in New and Next Generation Computing Environments |
Event Title: | IEEE International Conference on Pervasive Computing and Communications (PerCom2019) |
Event Location: | Kyoto, Japan |
Event Dates: | March 2019 |
Date Deposited: | 21 Jan 2019 08:13 |
Export: | |
Suche nach Titel in: | TUfind oder in Google |
![]() |
Send an inquiry |
Options (only for editors)
![]() |
Show editorial Details |