Improving wireless privacy with an identifier-free link layer protocol

ABSTRACT

We present the design and evaluation of an 802.11-like wireless link layer protocol that obfuscates all transmitted bits to increase privacy. This includes explicit identifiers such as MAC addresses, the contents of management messages, and other protocol fields that the existing 802.11 protocol relies on to be sent in the clear. By obscuring these fields, we greatly increase the difficulty of identifying or profiling users from their transmissions in ways that are otherwise straightforward. Our design, called SlyFi, is nearly as efficient as existing schemes such as WPA for discovery, link setup, and data delivery despite its heightened protections; transmission requires only symmetric key encryption and reception requires a table lookup followed by symmetric key decryption. Experiments using our implementation on Atheros 802.11 drivers show that SlyFi can discover and associate with networks faster than 802.11 using WPA-PSK. The overhead SlyFi introduces in packet delivery is only slightly higher than that added by WPA-CCMP encryption (10% vs. 3% decrease in throughput).

REFERENCES

• 1: Hostap driver. http://hostap.epitest.fi/.
• 2: libgcrypt. http://directory.fsf.org/project/libgcrypt/.
• 3: Madwifi driver. http://madwifi.org/.
• 4: roofnet. http://pdos.csail.mit.edu/roofnet/doku.php.
• 5: Soekris engineering. http://www.soekris.com/net4801.htm.
• 6: Ieee 802.11i-2004 amendment to ieee std 802.11, 2004. standards.ieee.org/getieee802/download/802.11i-2004.pdf.
• 7: Martín Abadi , Cédric Fournet, Private authentication, Theoretical Computer Science, v.322 n.3, p.427-476, 6 September 2004 [doi>10.1016/j.tcs.2003.12.023]
• 8: Armknecht, F., Girão, J., Matos, A., and Aguiar, R. L. Who said that? privacy at link layer. In INFOCOM (2007), IEEE.
• 9: Mihir Bellare , Alexandra Boldyreva , Anand Desai , David Pointcheval, Key-Privacy in Public-Key Encryption, Proceedings of the 7th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology, p.566-582, December 09-13, 2001
• 10: Bellare, M., and Yee, B. Forward-security in private-key cryptography. Topics in Cryptology - CT-RSA'03, LNCS 2612 (2003).
• 11: Chandra, R., Mahajan, R., Padmanabhan, V., and Zhang, M. CRAWDAD data set microsoft/osdi2006 (v. 2007-05-23). http://crawdad.cs.dartmouth.edu.
• 12: Yu-Chung Cheng , John Bellardo , Péter Benkö , Alex C. Snoeren , Geoffrey M. Voelker , Stefan Savage, Jigsaw: solving the puzzle of enterprise 802.11 analysis, Proceedings of the 2006 conference on Applications, technologies, architectures, and protocols for computer communications, September 11-15, 2006, Pisa, Italy
• 13: Landon P. Cox , Angela Dalton , Varun Marupadi, SmokeScreen: flexible privacy controls for presence-sharing, Proceedings of the 5th international conference on Mobile systems, applications and services, June 11-13, 2007, San Juan, Puerto Rico [doi>10.1145/1247660.1247688]
• 14: Roger Dingledine , Nick Mathewson , Paul Syverson, Tor: the second-generation onion router, Proceedings of the 13th conference on USENIX Security Symposium, p.21-21, August 09-13, 2004, San Diego, CA
• 15: Ben Greenstein , Ramakrishna Gummadi , Jeffrey Pang , Mike Y. Chen , Tadayoshi Kohno , Srinivasan Seshan , David Wetherall, Can Ferris Bueller still have his day off? protecting privacy in the wireless era, Proceedings of the 11th USENIX workshop on Hot topics in operating systems, p.1-6, May 07-09, 2007, San Diego, CA
• 16: Marco Gruteser , Dirk Grunwald, Enhancing location privacy in wireless LAN through disposable interface identifiers: a quantitative analysis, Mobile Networks and Applications, v.10 n.3, p.315-325, June 2005 [doi>10.1007/s11036-005-6425-1]
• 17: Hu, Y.-C., and Wang, H. J. A framework for location privacy in wireless networks. In SIGCOMM Asia Workshop (April 2005).
• 18: Tao Jiang , Helen J. Wang , Yih-Chun Hu, Preserving location privacy in wireless lans, Proceedings of the 5th international conference on Mobile systems, applications and services, June 11-13, 2007, San Juan, Puerto Rico [doi>10.1145/1247660.1247689]
• 19: Juels, A. RFID security and privacy: A research survey. IEEE Journal on Selected Areas in Communication 24, 2 (Feb. 2006).
• 20: Eddie Kohler , Robert Morris , Benjie Chen , John Jannotti , M. Frans Kaashoek, The click modular router, ACM Transactions on Computer Systems (TOCS), v.18 n.3, p.263-297, Aug. 2000 [doi>10.1145/354871.354874]
• 21: Jeffrey Pang , Ben Greenstein , Ramakrishna Gummadi , Srinivasan Seshan , David Wetherall, 802.11 user fingerprinting, Proceedings of the 13th annual ACM international conference on Mobile computing and networking, September 09-14, 2007, Montréal, Québec, Canada [doi>10.1145/1287853.1287866]
• 22: Pang, J., Greenstein, B., McCoy, D., Seshan, S., and Wetherall, D. Tryst: The case for confidential service discovery. In HotNets (2007).
• 23: Neal Patwari , Sneha K. Kasera, Robust location distinction using temporal link signatures, Proceedings of the 13th annual ACM international conference on Mobile computing and networking, September 09-14, 2007, Montréal, Québec, Canada [doi>10.1145/1287853.1287867]
• 24: Charles Reis , Ratul Mahajan , Maya Rodrig , David Wetherall , John Zahorjan, Measurement-based models of delivery and interference in static wireless networks, ACM SIGCOMM Computer Communication Review, v.36 n.4, October 2006
• 25: Rodrig, M., Reis, C., Mahajan, R., Wetherall, D., Zahorjan, J., and Lazowska, E. CRAWDAD data set uw/sigcomm2004 (v. 2006-10-17). http://crawdad.cs.dartmouth.edu.
• 26: T. Scott Saponas , Jonathan Lester , Carl Hartung , Sameer Agarwal , Tadayoshi Kohno, Devices that tell on you: privacy trends in consumer ubiquitous computing, Proceedings of 16th USENIX Security Symposium on USENIX Security Symposium, p.1-16, August 06-10, 2007, Boston, MA
• 27: Singelée, D., and Preneel, B. Location privacy in wireless personal area networks. In WiSe (2006).
• 28: Dawn Xiaodong Song , David Wagner , Xuqing Tian, Timing analysis of keystrokes and timing attacks on SSH, Proceedings of the 10th conference on USENIX Security Symposium, p.25-25, August 13-17, 2001, Washington, D.C.
• 29: Song, J., Poovendran, R., Lee, J., and Iwata, T. The AES-CMAC algorithm. RFC 4493, June 2006.
• 30: Qixiang Sun , Daniel R. Simon , Yi-Min Wang , Wilf Russell , Venkata N. Padmanabhan , Lili Qiu, Statistical Identification of Encrypted Web Browsing Traffic, Proceedings of the 2002 IEEE Symposium on Security and Privacy, p.19, May 12-15, 2002
• 31: Suomalainen, J., Valkonen, J., and Asokan, N. Security associations in personal networks: A comparative analysis. Tech. Rep. NRC-TR-2007-004, Nokia Research Center, Jan. 2007.
• 32: Ping Tao , Algis Rudys , Andrew M. Ladd , Dan S. Wallach, Wireless LAN location-sensing for security applications, Proceedings of the 2nd ACM workshop on Wireless security, September 19-19, 2003, San Diego, CA, USA [doi>10.1145/941311.941314]
• 33: Charles V. Wright , Lucas Ballard , Fabian Monrose , Gerald M. Masson, Language identification of encrypted VoIP traffic: Alejandra y Roberto or Alice and Bob?, Proceedings of 16th USENIX Security Symposium on USENIX Security Symposium, p.1-12, August 06-10, 2007, Boston, MA
• 34: Charles V. Wright , Fabian Monrose , Gerald M. Masson, On Inferring Application Protocol Behaviors in Encrypted Network Traffic, The Journal of Machine Learning Research, 7, p.2745-2769, 12/1/2006

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.1 Network Architecture and Design
          Subjects: Wireless communication

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS

General Terms:
Design, Security

Keywords:
802.11, anonymity, privacy, wireless