MAC Address Research Articles

OPTIMALISASI KEAMANAN WIRELESS MENGGUNAKAN FILTERING MAC ADDRESS

The use 802.11 wireless-based network services have become one of the most widely used network services, this will be directly proportional to the security holes that are in the wireless network. The rise of access rights theft in wireless networks is due to the large number of software and tools available on the internet to read encryption in wireless security. To minimize the occurrence of theft of access rights in wireless networks can use a layered security system by implementing security Hotspot login and MAC Address Filtering. This layered wireless network security is able to block users who try to access the network. This is because the wireless network security system has verified access rights 2 (two) times by matching the username and password in the hotspot login with the physical address or MAC address of the client. From the research results obtained by clients who use a username and password with different devices can not access the computer network. So every client who wants to connect to the internet network must use a device that has registered its MAC Address and in accordance with user access rights and passwords in the Hotspot login

BLE-Based Indoor Tracking System with Overlapping-Resistant IoT Solution for Tourism Applications.

In this paper, an overlapping-resistant Internet of Things (IoT) solution for a Bluetooth Low Energy (BLE)-based indoor tracking system (BLE-ITS) is presented. The BLE-ITS is a promising, inexpensive alternative to the well-known GPS. It can be used in human traffic analysis, such as indoor tourist facilities. Tourists or other customers are tagged by a unique MAC address assigned to a simple and energy-saving BLE beacon emitter. Their location is determined by a distributed and scalable network of popular Raspberry Pi microcomputers equipped with BLE and WiFi/Ethernet modules. Only simple triggered messages in the form of login records (LRs) are sent to a server, where the so-called path vectors (PVs) and interest profile (IPr) are set. The authors implemented the prototype and demonstrated its usefulness in a controlled environment. As it is shown in the paper, the solution is highly overlap-resistant and mitigates the so-called multilocation problem.

Wi-Fi Devices Individual Identification based on Envelope Front Characteristic

There are some characteristics are used for traditional Wi-Fi devices individual identification methods, such as: amplitude and phase characteristics during the period that Wi-Fi devices are turned-on or turned-off, MAC address, and IP address. In fact, on one hand, MAC address and IP address are easily to be changed. Traditional methods can’t identify individual Wi-Fi devices if MAC address or IP address changed. On the other hand, the amplitude and phase characteristics of Wi-Fi devices can only be identified during the short period of turned-on or turned-off. The traditional methods have application limitations. Therefore, the Wi-Fi devices individual identification based on envelope front characteristic is proposed in this paper. Firstly, envelopes of Wi-Fi signals are extracted. Secondly, front characteristics of Wi-Fi envelope are extracted. Then envelope front characteristics are used to compare and match with models saved in the library to realize Wi-Fi devices individual identification. By using the method proposed in this paper, Wi-Fi devices individual identification can be realized whether MAC address or IP address changed. Scope of identification application can be effectively expanded into the whole time when Wi-Fi devices transmit signals by using this method. Since envelope front characteristics have the advantages of non-changing and non-copying, accuracy of Wi-Fi individual identification is also improved by using this method.

ARP cache poisoning: detection, mitigation and prevention schemes

ARP is a network communication protocol employed for mapping a network address to a MAC address at the data link layer of the IP suite. However, the absence of authentication process in the ARP protocol allows vulnerabilities like ARP cache poisoning or ARP spoofing to take place. This allows malicious nodes to associate its MAC address with the IP address of host, and hence resulting in the exposure of network to several severe attacks like DoS, MITM, session hijacking and many more. There is no universally accepted benchmark scheme that reaches to the solution at fullest. This paper presents a comprehensive review of all those schemes along with their associated strengths and weaknesses. Also, a comparative evaluation of schemes is included in the paper for further insight into the development of improvised solutions to the above stated problem.

On QoS-aware location privacy in mobile networks

We deal with the threats to user privacy in the context of wireless local networks. We focus on location privacy where an adversary tries to learn a user's past and current locations. The current Wi-Fi standard is vulnerable to location privacy and mobility profiling attacks due to the transmission of personally identifying information such as the MAC address in plain text. We provide a generic mathematical model to quantify and express the privacy and elaborate a decentralised algorithm that allows users to attain their desired levels of privacy while lowering its effect on the QoS perceived by them. We evaluate our proposal with numerical simulation and mobility traces collected from Wi-Fi users in an office environment. We show that higher privacy can be obtained with a variable effect on the throughput available to users.

AN ATTACK SCENARIO USING A ROGUE ACCESS POINT IN IEEE 802.11 NETWORKS

One of the most serious security threats to wireless local area networks (WLANs) in recent years is rogue access points that intruders use to spy on and attack. Due to the open nature of the wireless transmission medium, an attacker can easily detect the MAC addresses of other devices, commonly used as unique identifiers for all nodes in the network, and implement a spoofing attack, creating a rogue access point, the so-called "Evil Twin". The attacker goal is to connect legitimate users to a rogue access point and gain access to confidential information. This article discusses the concept, demonstrates the practical implementation and analysis of the “Evil Twin” attack. The algorithm of the intruder's actions, the scenario of attack on the client, and also procedure for setting up the program-implemented rogue access point is shown. It has been proven that the implementation of the attack is possible due to the existence of several access points with the same service set identifier and MAC address in the same area, allowed by 802.11 standard. The reasons for failure operation of the network and possible interception of information as a result of the attack are identified, methods of detecting rogue access points are analyzed. During the experiment, observations of the 802.11 frames showed that there were deviations in the behavior of beacon frames at the time of the "Evil Twin" attack. First, the number of beacon frames coming from the access point which succumbed to the attack is increasing. Secondly, the traffic analyzer detected significant fluctuations in the values of the received signal level, which simultaneously come from a legitimate and rogue access point, which allows to distinguish two groups of beacon frames. The "Evil Twin" attack was implemented and researched using Aircrack-ng – a package of software for auditing wireless networks, and Wireshark – network traffic analyzer. In the future, the results obtained can be used to improve methods of protection against intrusion into wireless networks, in order to develop effective systems for detecting and preventing intrusions into WLAN.

Authenblue: A New Authentication Protocol for the Industrial Internet of Things

The Internet of Things (IoT) is where almost anything can be controlled and managed remotely by means of sensors. Although the IoT evolution led to quality of life enhancement, many of its devices are insecure. The lack of robust key management systems, efficient identity authentication, low fault tolerance, and many other issues lead to IoT devices being easily targeted by attackers. In this paper we propose a new authentication protocol called Authenblue that improve the authentication process of IoT devices and Coordinators of Personal Area Network (CPANs) in an Industrial IoT (IIoT) environment. This study proposed Authenblue protocol as a new Blockchain-based authentication protocol. To enhance the authentication process and make it more secure, Authenblue modified the way of generating IIoT identifiers and the shared secret keys used by the IIoT devices to raise the efficiency of the authentication protocol. Authenblue enhance the authentication protocol that other models rely on by enhancing the approach used to generate the User Identifier (UI). The UI values changed from being static values, sensors MAC addresses, to be generated values in the inception phase. This approach makes the process of renewing the sensor keys more secure by renewing their UI values instead of changing the secret key. In this study, Authenblue has been simulated in the Network Simulator 3 (NS3). Simulation results show an improved performance compared to the related work.

WITHDRAWN: Product key activation for software products using Collatz Conjuncture and asymmetric key cryptography

Abstract Nowadays, almost all software products are sold online. But there is a danger of unauthorized users using the product. For this reason, every company employs a product activation system where only authorized users that have a unique key called the product key can use the application. But attackers always find a way to get past the authorization. For example, they use a key generator that generates a random key that matches the format of the product key and can be used to activate the product. Therefore, to avoid this, we need improved product activation programs that can safeguard the product from unauthorized users. This paper proposes an improved key verification system to make sure that the product can be used on one system only. Every system has a unique MAC address, and that's what we use as the foundation for our method. The main contribution of this work is the effective use of a system's MAC address, which in turn boosts the security of the project. The necessary procedure consists of retrieving a MAC address from the user's system. Now, a serial key is derived by performing specific operations on the MAC address, which is then converted into a more straightforward, user-friendly product key while encryption and decryption take place during the transmission of keys between client and server. Looking ahead, this work can lead to better and consistent use of MAC addresses in key generation techniques, which is something that hasn't been explored enough.

AEGIS: Detection and Mitigation of TCP SYN Flood on SDN Controller

Software-Defined Network (SDN) segregates the control plane and the data plane to bring about a programmable network. The controller at the control plane runs network modules and sets rules for forwarding the packets in the switches that resides at the data plane. Though advantageous in several ways, SDN can fail when the controller is saturated by a flood of TCP SYN packets. SYN flood can be created using malicious spoofing of IP or MAC addresses or flash crowd. The existing solutions to mitigate SYN flood against the controller does not adequately handle MAC spoofing based SYN flood, and these are unable to distinguish between flash crowd and malicious traffic. To overcome some limitations in existing solutions, we propose a novel mechanism called AEGIS , which detect and mitigate SYN flood against the controller in SDN. AEGIS runs in the controller, and it regularly checks if there is a performance lag in the controller due to an ongoing SYN flood. If a performance degradation is detected, then AEGIS takes it an indication of SYN flood and it identifies whether it is due to spoofed addresses or flash crowd. Once the reason is found, the appropriate mitigation procedure is triggered. We evaluate AEGIS in testbed and emulator settings, and we compare the results of the evaluation with state-of-the-art solutions. The performance evaluation of AEGIS shows that it identifies the malicious SYN at an accuracy of 97.78%. Moreover, when there is no SYN flood, AEGIS takes 0.0637s to set up a successful TCP connection, which is 53.81% less than the time taken by the state-of-the-art solution, thus, it proves that AEGIS is lightweight.

Mcuabsensi Pemanfaatan Hostpot Nodemcu, Aplikasi Android, Dan Raspberry Untuk Pengambilan Absensi Online

Sistem absensi online dengan pemanfaatan Raspberry sebagai server lokal untuk sinkron data sistem pada server dan pengolahan data absensi, nodemcu sebagai alat yang dapat memancarkan sinyal hostpot untuk pengambilan absensi dan android yang terhubung ke hostpot nodemcu dengan aplikasi android untuk masing - masing perserta acara dalam pengambilan absensi. Pada sistem ini Absensi yang dapat diambil pada jarak kurang dari 30 meter dengan pemanfaatan sinyal hostpot nodemcu, alat absensi dengan daya tambahan baterai sebagai atisipasi daya utama listrik mati, server lokal Raspberry pi yang selalu sinkron dengan server publik sehingga pada saat jaringan internet mati request absensi masih dapat diolah dan di simpan, aplikasi yang menyimpan mac address peserta acara sehingga hanya terapat satu perangak pada satu user untuk minimalisir kecurangan penitipan absensi, pengambilan absensi dan izin acara dapat dilakukan pada aplikasi android, pengambilan absensi memungkinkan dapat diambil secara bersamaat untuk mengatasi pengambilan absensi. Sistem absensi ini memanfaatkan teknologi Restfult API dengan framework Express pemograman JavaScript ,mikrokontroller dengan Arduino IDE pemrograman C, website dengan framework React.js pemograman JavaScript, dan aplikasi android dengan React Native pemograman JavaScript. Dalam perancangan sistem absensi ini memiliki beberapa metode yaitu identifikasi permasalahan, studi literatur, konsultasi, analisi sistem, perancangan sistem, dan implementasi. Hasil dari sistem ini berupa sistem yang dapat mengefesienkan pengambilan dan minimalisir kecurangan absensi

On WPA2-Enterprise Privacy in High Education and Science

A plethora of organizations, companies, and foremost universities and educational institutions are using WPA2-Enterprise protocol to allow their end-users to connect to provided Wi-Fi networks. When both the provider’s and the end-user’s devices are configured properly, it is considered one of the safest Wi-Fi connection protocols with the added benefits of having a unique password for every Wi-Fi user. However, a known evil twin attack can be performed to steal users’ Wi-Fi login credentials, if the devices are not configured correctly. Considering the widespread use of Wi-Fi-enabled smartphones and rising concerns regarding users’ privacy, we focus on the privacy aspects of WPA2-Enterprise vulnerabilities mainly on the widespread Eduroam network. We show that device deanonymization is a concerning liability of many Eduroam networks. More than 87% of 1650 devices collected during a two-month test on our university are vulnerable to MAC address deanonymization attack. Furthermore, by analyzing the Eduroam Configuration Assistant Tool of 1066 different institutions around the world, 67% of exported Eduroam profiles having the Wi-Fi device reveal the user’s identity in the clear, thus linking the users with the device’s MAC address. Indeed, the analysis of the configuration profiles has been confirmed by performing the deanonymization attack on a large-scale international music festival in our country, where 70% of the devices have been vulnerable. Additionally, we showcase the psychological aspects of secure Eduroam users, where some are willing to modify secure configuration profiles to gain aspects to certain blocked features. As a result, the attacker is granted with user credentials and IMSI number and provided with access to all Eduroam-related services.

CEDAR: A Cost-Effective Crowdsensing System for Detecting and Localizing Drones

The increasing popularity of drones is bringing many public security and privacy breach issues, such as smuggling, intrusion, and illegal surveillance. Traditional approaches to detecting and localizing drones such as radar and computer vision incur high costs and hence are not desirable for large-scale applications. In this paper, we propose a cost-effective crowdsensing system named CEDAR to achieve such a goal. Specifically, we introduce a novel way of detecting drones by smartphones, exploiting the fact that most drones adopt Wi-Fi for communications with ground control stations. We design an efficient detection algorithm that takes advantage of historical Wi-Fi beacon information and MAC address encoding mechanisms used by drone manufacturers. Using received signal strength, we can also localize the detected drones. Further, to encourage participants’ involvement, we design an incentive mechanism based on online auction that guarantees truthfulness and consumer sovereignty. CEDAR can be directly applied to multiple drone scenarios. We implement the system based on Android for the client and Spring, Spring MVC, and Mybatis (SSM) for the centralized platform that supports scalability and hierarchical structure, and enables the coordination between clients and the platform. We perform extensive experiments to validate our analysis. Particularly, the detection rate in the experiments reaches 86.7 percent even without any prior information about drones.

A novel technique to prevent SQL injection and cross-site scripting attacks using Knuth-Morris-Pratt string match algorithm

Structured Query Language (SQL) injection and cross-site scripting remain a major threat to data-driven web applications. Instances where hackers obtain unrestricted access to back-end database of web applications so as to steal, edit, and destroy confidential data are increasing. Therefore, measures must be put in place to curtail the growing threats of SQL injection and XSS attacks. This study presents a technique for detecting and preventing these threats using Knuth-Morris-Pratt (KMP) string matching algorithm. The algorithm was used to match user’s input string with the stored pattern of the injection string in order to detect any malicious code. The implementation was carried out using PHP scripting language and Apache XAMPP Server. The security level of the technique was measured using different test cases of SQL injection, cross-site scripting (XSS), and encoded injection attacks. Results obtained revealed that the proposed technique was able to successfully detect and prevent the attacks, log the attack entry in the database, block the system using its mac address, and also generate a warning message. Therefore, the proposed technique proved to be more effective in detecting and preventing SQL injection and XSS attacks

Probe Request Based Device Identification Attack and Defense

Wi-Fi network has an open nature so that it needs to face greater security risks compared to wired network. The MAC address represents the unique identifier of the device, and is easily obtained by an attacker. Therefore MAC address randomization is proposed to protect the privacy of devices in a Wi-Fi network. However, implicit identifiers are used by attackers to identify user’s device, which can cause the leakage of user’s privacy. We propose device identification based on 802.11ac probe request frames. Here, a detailed analysis on the effectiveness of 802.11ac fields is given and a novel device identification method based on deep learning whose average f1-score exceeds 99% is presented. With a purpose of preventing attackers from obtaining relevant information by the device identification method above, we design a novel defense mechanism based on stream cipher. In that case, the original content of probe request frame is hidden by encrypting probe request frames and construction of probe request is reserved to avoid the finding of attackers. This defense mechanism can effectively reduce the performance of the proposed device identification method whose average f1-score is below 30%. In general, our research on attack and defense mechanism can preserve device privacy better.

Prediction of the crowd behavior in campus based on time series model

Recognizing and understanding the behavior of the campus crowd is of great significance for improving the comprehensive management capabilities of the campus. The increasingly abundant of mobile terminal WIFI signals provide a unique data source for studying the behavior of the campus crowd. A Wifi-based personnel activity monitoring system is developed in this paper. Through monitoring and analyzing the MAC address (Media Access Control Address), RSSI (Received Signal Strength Indication) and Wireless AP (Access Point) in and around the Science Museum, Huaizhou building of Yunnan University, the association between WIFI signal and the crowd behavior is studied. Time series analysis is used to make predictions, and some valuable information about the gathering and activity status of campus crowd behavior is obtained. It provides an experimental platform for studying the dynamic behavior of people in campus or other crowd areas.

Indoor Crowd Density Estimation Through Mobile Smartphone Wi-Fi Probes

Crowd density estimation is one of the critical issues in social activities. The traditional solution to this problem is to leverage video surveillance to monitor a crowd. However, this is not accurate for crowd density estimation because it is still hard to identify people from background. In the past few years, more and more people use Wi-Fi enabled smartphones. Smartphones can send Wi-Fi request packets periodically, even when they are not connected to access points. This gives another promising solution to the crowd density estimation even for the public environment. In this paper, we first develop a Wi-Fi monitor detection that can capture smartphone passive Wi-Fi signal information including MAC address and received signal strength indicator. Then, we propose a positioning algorithm based on smartphone passive Wi-Fi probe and a dynamic fingerprint management strategy. In real-world public social activities, a person may have zero, one, two, or multiple smartphones with variant Wi-Fi signals. Therefore, we design a method of computing the probability of a user generating one Wi-Fi signal to identify people population. Finally, we propose a crowd density estimation solution based on Wi-Fi probe packets positioning algorithm. Experiments were conducted in an indoor laboratory class and three public social activities, clearly demonstrated that the proposed solution can effectively and accurately estimate crowd density.

Implementation of a geographical routing scheme for low Earth orbiting satellite constellations using intersatellite links

SummaryA major problem for low Earth orbit (LEO) constellations with intersatellite links is the efficient routing of the data packets through such a highly dynamic network. In order to achieve a worldwide coverage even in remote areas and Internet access with a limited amount of gateway stations, intersatellite links are a promising approach. Since LEO constellations represent a distinct, highly dynamic routing environment, specific strategies are needed. To this end, a suitable geographical routing scheme is proposed and investigated in two Walker Star constellations. The proposed scheme targets reliable transmissions with low latency and high data rates. The approach is based on a geographical address identifier in Layer 2 of the communication stack. The globe is thus divided into geographical areas that determine this identifier in the MAC address of the terminals. As mobile terminals are considered, the MAC addressing scheme is flexible, whereas the IP addresses of the terminals remain static. This decoupling allows for flexibility in the choice of the address resolution scheme. Moreover, the geographical identifier in the MAC address enables fast routing table lookups and switching. The proposed routing scheme also takes possible overloads of the satellites due to traffic into account and applies a rerouting procedure. When a packet arrives in the geographical area of the destination terminal, a local rerouting scheme is applied if needed. The proposed approaches take handover events that possibly occur during a transmission into account. Furthermore, the scan angles of the satellites have been adapted to the constellations to provide full coverage and high elevation angles. So a robust and adaptable routing scheme is provided for a dynamic environment where satellites and terminals are constantly moving. The proposed definitions and procedures have been implemented in a system level simulator, which allows for comparisons with adjustable parameters in various scenarios. In this work, an Iridium‐like constellation and a megaconstellation are investigated and compared regarding the address resolution procedures, the average end‐to‐end transmission delay, and the dropping and rerouting rates. Additionally, the signaling overhead is compared with other approaches. The simulator and results of the simulations provide grounds for further research w.r.t. the routing in satellite constellations using intersatellite links.

Analisis Bukti Serangan Address Resolution Protocol Spoofing menggunakan Metode National Institute of Standard Technology

This research intends to find information about evidence of Address Resolution Protocol (ARP) Spoofing attacks that is the MAC address of the attacker and victim also the time of the attack. This research uses Wireshark tools to inspect network traffic, especially on the ARP protocol. It uses the National Institute of Technology Technology (NIST) method as a framework in the simulation process to produce evidence reports. ARP Spoofing attacks can lead to other attacks, such as Denial of Service and Man in the Middle Attack, this attack allows users not to be able to access the network and data theft. During the simulation stage, 2 ARP Spoofing attacks are carried out on 1 laptop and 1 router connected to the network. The results of the attack simulation found 2 attacks and obtained information about the MAC address of the attacker and victim and also the time of the attack. Based on the results of tests carried, successfully found all ARP Spoofing attacks that occur on the network with a success rate of 100%

Towards linking social media profiles with user’s WiFi preferred network list

Considering the ubiquity of WiFi enabled devices and user’s mobility, location privacy within WiFi networks is one of the focus points of many researchers. Preferred Network Lists (PNL), within which devices store a list of names of previously used hotspots - Service Set Identifiers (SSIDs), is transmitted in clear by a portion of devices as a part of WiFi connection protocol. PNL has proven to be one exceptionally interesting source of private data on user’s previous whereabouts. However, since the PNL datasets are anonymized, most of the available work focuses on groups of users as opposed to one particular user.In this paper we work towards finding the name of the person behind the device’s PNL. We introduce a novel SSID - location tag matching function, followed by an algorithm used for intersecting large PNL datasets with localization tags on Instagram social network. The algorithm enables us to match the user’s MAC address and PNL with his full name, photos and activities. We find that deanonymization of a MAC address provides serious implications for potential long term tracking. We tested our work in real life conditions on a large scale music festival. To approach the ground truth we conducted hand check tests performed by 10 testers who concluded that more than 50% of the proposed matches were correct.

SMART VEST AND MONITORING SYSTEM FOR AIRSOFT SPORT-GAMES USING VIBRATION SENSOR

Airsoft gun is a replica of weapons used for airsoft sports-games activities. These sport-games are usually equipped with ball bullet type, vest protector, helmet and sunglasses. Rules of the game are defined by prioritizing the honesty of each player if hit by a shot. This becomes a weakness and is misused by the player. To reduce these two impacts, this paper proposed an innovation by developing vest that can detect laser light and the bullet. Those hits then connected to the database and also monitoring system. This system is constructed using Light Dependent Resistor, Raspberry Pi 3, motor vibration sensor, piezoelectric, LED lamp, and buzzer. By utilizing the MAC Address of Raspberry Pi 3, the player can be recognized and the counter of the remaining lives of the player will be displayed. The player’s life can be determined by a shoot, if point 25 is set for one shoot, then the player declares the game is over after four hits. Based on the testing results, this research can help to do these sport-games informative, efficient and fairly.