Localization of Wireless Threat Actors and Evasion Tactics

No ratings

Presented at bsidesaugusta 2017 by

Tommy Chin

Widely used throughout public space, mobile computing devices such as smartphones and Internet of Things (IoT) have littered the wireless spectrum of high volume network traffic. Traditional communication of these electronic devices use wireless mediums such as, but not limited to, Wi-Fi, Bluetooth, Near-Field-Communication (NFC), GSM, and ZigBee. From an offensive perspective, the use of wireless as an attack vector can be a prominent approach as both unencrypted data communication channels and misconfigured networking devices can lead to security concerns for an end user. Localization of a wireless threat actor from a physical perspective presents a challenge as wireless networks provide service for a large area, and specifically--real-world (meatspace). This talk discusses techniques of wireless localization (physically locating a target using wireless measurements), tracking enhancements, and presents concepts of tracking evasion in Wi-Fi networks. Additionally, real-world experiments were conducted in high-density noise regions using robotic moving targets in a controlled environment. The results of such evaluation demonstrates the viability of Wi-Fi tracking.