Wireless Frame Research Articles

Research on security encryption mechanism of physical Layer based on iterative quantization method

Third-party eavesdropping is a unsolved problem in the process of data transmission in the physical layer of IoT (Internet of Things) in Power Systems. The security encryption effect is affected by channel noise and the half-duplex nature of the wireless channel, which leads to low key consistency and key generation rate. To address this problem, a reliable solution for physical layer communication security is proposed in this paper. First, the solution improved the key consistency by dynamically adjusting the length of the training sequence during feature extraction; Second, using an iterative quantization method to quantify the RSS (Received Signal Strength) measurements to improve generation rate of the key. Finally, based on the short-time energy method for the extraction of wireless frame interval features, by monitoring the change of inter-frame interval features, we can quickly determine whether there is an eavesdropping device into the link. Simulation results show that the reciprocity of legitimate channels R (R will be explained in detail in the following) is improved by 0.1, the key generation rate is increased by about 70%, and the beacon frames are extracted from the wireless link with good results compared to the methods that do not use dynamic adjustment of the pilot signal during the channel probing phase. The result shows that this method can effectively prevents third-party eavesdropping, effectively improves the key consistency and generation rate, and effectively implements beacon frame detection.

Code Injection Attacks in Wireless-Based Internet of Things (IoT): A Comprehensive Review and Practical Implementations.

The Internet of Things (IoT) has transformed various domains in our lives by enabling seamless communication and data exchange between interconnected devices, necessitating robust networking infrastructure. This paper presents a comprehensive analysis of code injection attacks in IoT, focusing on the wireless domain. Code injection attacks exploit security weaknesses in applications or software and can have severe consequences, such as data breaches, financial losses, and denial of service. This paper discusses vulnerabilities in IoT systems and examines how wireless frames in state-of-the-art wireless technologies, which serve IoT applications, are exposed to such attacks. To demonstrate the severity of these threats, we introduce a comprehensive framework illustrating code injection attacks in the wireless domain. Several code injection attacks are performed on Wireless Fidelity (Wi-Fi) devices operating on an embedded system commonly used in IoT applications. Our proof of concept reveals that the victims' devices become further exposed to a full range of cyber-attacks following a successful severe code injection attack. We also demonstrate three scenarios where malicious codes had been detected inside the firmware of wireless devices used in IoT applications by performing reverse engineering techniques. Criticality analysis is conducted for the implemented and demonstrated attacks using Intrusion Modes and Criticality Analysis (IMECA). By understanding the vulnerabilities and potential consequences of code injection attacks on IoT networks and devices, researchers and practitioners can develop more secure IoT systems and better protect against these emerging threats.

Protecting Location Privacy in IoT Wireless Sensor Networks through Addresses Anonymity

Location privacy is very important for event-triggered type of Wireless Sensor Networks (WSNs) applications such as tracking and monitoring of wild animals. Most of the security schemes for WSNs are designed to provide protection for content privacy. Contextual privacy such as node identity anonymity has received much less attention. The adversary can fully explore such contextual information to disclose the location of critical components such as source nodes or base station. Most existing schemes provide location privacy at network layer. As no measures are taken to provide node identity anonymity at data link layer, the adversary can launch traffic analysis attacks to jeopardize location privacy. In this paper, a scheme named HASHA is proposed to defend against traffic analysis attacks through hashed one-time addresses. Hashed results of payload are used to create dynamic one-time MAC addresses between the communication pairs. Because of inevitable wireless frame errors, it is impossible for adversaries to track dynamic addresses. Therefore, HASHA can provide strong node identity anonymity, which makes traffic analysis attacks much more difficult and provides better location privacy. Simulations and analysis results show that HASHA can provide better location privacy with limited communication overheads, which is particularly suitable for resource-limited WSNs.

Performance of an Adaptive Aggregation Mechanism in a Noisy WLAN Downlink MU-MIMO Channel

This paper investigates an adaptive frame aggregation technique in the medium access control (MAC) layer for the Wireless Local Area Network (WALN) downlink Multi-User–Multiple-In Multiple-Out (MU-MIMO) channel. In tackling the challenges of heterogeneous traffic demand among spatial streams, we proposed a new adaptive aggregation algorithm which has a superior performance over the baseline First-in–First-Out (FIFO) scheme in terms of system throughput performance and channel utilization. However, this earlier work does not consider the effects of wireless channel error. In addressing the limitations of this work, this study contributes an enhanced version of the earlier model considering the effect of channel error. In this approach, a dynamic adaptive aggregation selection scheme is proposed by employing novel criteria for selecting the optimal aggregation policy in WLAN downlink MU-MIMO channel. Two simulation setups are conducted to achieve this approach. The simulation setup in Step 1 performs the dynamic optimal aggregation policy selection strategy as per the channel condition, traffic pattern, and number of stations in the network. Step 2 then performed the optimal wireless frame construction that would be transmitted in the wireless channel in adopting the optimal aggregation policy obtained from Step 1 that maximizes the system performance. The proposed adaptive algorithm not only achieve the optimal system throughput in minimizing wasted space channel time but also provide a good performance under the effects of different channel conditions, different traffic models such as Pareto, Weibull, and fBM, and number of users using the traffic mix of VoIP and video data. Through system-level simulation, our results again show the superior performance of our proposed aggregation mechanism in terms of system throughput performance and space channel time compared to the baseline FIFO aggregation approach.

Visibility graph entropy based radiometric feature for physical layer identification

Emerging physical layer identification methods have demonstrated the capability to complement and enhance the device authentication of Internet of Things networks by exploiting the uncontrollable, unclonable, and unforgeable radiometric features resulted from randomly generated hardware imperfection in wireless devices. Multiple feature-based identification has proven an efficient and feasible approach to improving identification performance. At the same time, the lack of radiometric features effective for device identification is a major problem. Most of the existing features are derived from the view of the time, frequency, or phase domain. In this study, we explore the graph domain of wireless frame’s preambles and propose a new radiometric feature called normalized horizontal visibility graph Shannon entropy (HVGE). At first, we introduce a preprocessing consisting of sample truncation and downsampling to enable the adjustment between the computational time of visibility graph (VG) conversion and the identification performance. Secondly, we propose the calculation method of the new HVGE feature from the VG representation. Finally, an experimental study using 50 off-the-shelf wireless devices was conducted to investigate the impact of the preprocessing parameters and the effect of noise and feature combinations on the identification performance gain.

Adaptive Security-aware Cone-shaped Request-zone Location-aided Routing Protocol Using Agent-Based Methodology for VANETs

In this paper, we propose an agent-based adaptive security-aware enhancement algorithm with congestion control mechanism for limited resources VANETs using intelligent transportation systems. The proposed security algorithm is to be installed at a central server that receives information about the vehicle resources from distributed intelligent road side units (RSUs) in a virtual segmented road via existing wireless cellular networks (4G). The security algorithm adaptively makes a decision about the best integrity security service level a source node can adopt while encrypting its data flows according to a resource estimation congestion control mechanism. The information about the security level decision will be transferred from the central server to the RSU via wireless cellular networks (4G). From the other side, the RSU transfers it to the source vehicle node via Wi-Fi direct technology. In finding the secure route to destination, we adopt our previously proposed secure cone-shaped request-zone LAR (SCSLAR). In order to notify the destination node with the security level that was adopted by the source, we override the 1st 3 bits of the 1st payload byte of the IEEE 802.11 wireless frame format to represent the associated integrity security level. Using three main network parameters: node density, vehicular speed, and number of malicious nodes, extensive simulation results based on QualNet simulator that is based on the GloMoSim used by Scalable Network Technologies (SNT) show that the proposed secure cone-shaped request zone LAR with resource estimation methodology (SCSLAR-RE) outperforms the SCSLAR regarding data delivery and in protecting the VANET from being congested by heavy traffic load through minimizing both the buffer consumption and the average packets delays at the destination side, while providing the best integrity security level to the data streams that make them robust against the alteration threat.

Multi-user Space-Time Modulation Scheme for Ultra Reliable Low Delay Communication

5G (The Fifth Generation) mobile networks are expected to achieve significant improvements in several key performance metrics, where low latency is urgently needed by many emerging IoT businesses, such as remote surgery, augmented reality, haptic Internet and IoV. In this paper, a multi-user space - time modulation scheme for super - reliable low - delay communication is studied. Based on 5 g technology support in the new wireless frame structure of the coexistence of a variety of business, for business and eMBB URLLC business coexist in the data transmission of conduct the thorough research to the downlink scheduling mechanism, this mechanism allows URLLC business data to grab some data are transmitted eMBB wireless resources, occupied in eMBB business to transmit data on punch to URLLC business can be scheduled in time, to meet the requirements of URLLC business ultra low delay.

A novel method for utilizing RF information from IEEE 802.11 frames in Software Defined Networks

Wireless security research using Radio Frequency (RF) data is complex and costly, often requiring expensive equipment and extensive offline processing. To make wireless research more accessible, we have integrated RF signal features with the existing IEEE 802.11 frame layer 2/3 data using the Software Defined Networking (SDN) paradigm. Combining low-cost RF hardware, a novel SDN processing method, and unique RF processing architecture has resulted in a framework that enables advanced wireless security and control research at a significantly lower cost. The method for enabling such functionality consist of the following stages:•During the demodulation process, extract Carrier Frequency Offset (CFO) and Pilot Sub-Carrier Offset from the Frequency Offset Correction section, in addition to the Vector Magnitude from the equalization section.•Append the new RF information to the wireless frame buffer and pass it to the SDR kernel driver module to further process before transferring them to a P4 application via a single API instantiation.•Compile a custom P4 application that combines the new RF features alongside higher OSI layer features to perform advanced networking, security, or control plane operations.

ECDSA Security Protocol for WSBNs

The execution of protection indicates internal wireless frame Sensor community (WBSN) makes connection with opportunities for continuously reason actualities inside the purpose in the lower back of execution valuation. The essentialness of such traditions may be made with the aid of formalizing its portions the use of grouped frameworks. Likewise, emulating the protection custom can deliver analyzing into more than one graph parameters, for instance, reaction to wellsprings of records, and assist changing those path of motion parameters. On this enterprise, we deliver a framework to reiterating protection shows inner wbsn with a selected veritable interest to assist that such custom meets focal safety nuts and bolts. With the route of motion to oversee issues illustrated, we need to signal a motorized engraving, as bona fide, to affirm the advantages of each extraordinary. Modernized inscriptions are some beast numbers, as an instance, an extended string of 1024 bits. It will in massive be despatched through the use of manner of the use of sender, others cannot fake it. As speedy as get gain the stamp, sender can't deny transmitting it. In case others faux the stamp, master can maintain in thoughts it with the beneficial resource of the usage of method of getting the message tolerability. With the beneficial beneficial aid of the use of this technique we've disconnected the execution of the framework. The results shows that the proposed form finished better the degree that centrality functionality, scatter, made packs, had been given companies, business enterprise transport degree and throughput of the framework.

ECDSA Security Protocol for WSBNs

The execution of protection indicates internal wireless frame Sensor community (WBSN) makes connection with opportunities for continuously reason actualities inside the purpose in the lower back of execution valuation. the essentialness of such traditions may be made with the aid of formalizing its portions the use of grouped frameworks. likewise, emulating the protection custom can deliver analyzing into more than one graph parameters, for instance, reaction to wellsprings of records, and assist changing those path of motion parameters. on this enterprise, we deliver a framework to reiterating protection shows inner wbsn with a selected veritable interest to assist that such custom meets focal safety nuts and bolts. with the route of motion to oversee issues illustrated, we need to signal a motorized engraving, as bona fide, to affirm the advantages of each extraordinary. modernized inscriptions are some beast numbers, as an instance, an extended string of 1024 bits. it will in massive be despatched through the use of manner of the use of sender, others cannot fake it. as speedy as get gain the stamp, sender can't deny transmitting it. in case others faux the stamp, master can maintain in thoughts it with the beneficial resource of the usage of method of getting the message tolerability. with the beneficial beneficial aid of the use of this technique we've disconnected the execution of the framework. the results shows that the proposed form finished better the degree that centrality functionality, scatter, made packs, had been given companies, business enterprise transport degree and throughput of the framework.

Non-Preservative Combination in Wireless Frame Capacity System

Non-Preservative Combination in Wireless Frame Capacity System

Enhancing MBMS Capacity by Increasing MBSFN Subframes in Wireless Frame

By improving configuration and structure of MBSFN frame, the delivery of synchronization and measurement of signals has been realized in MBSFN scenario, so as to overcome the contradiction between ensuring downlink synchronization and measurement and enhancing MBMS capacity. This pattern is especially suitable for Standalone scenarios and scenarios of subframe 0/5 configured for MBSFN subframes.

A Study of MAC Address Randomization in Mobile Devices and When it Fails

Abstract Media Access Control (MAC) address randomization is a privacy technique whereby mobile devices rotate through random hardware addresses in order to prevent observers from singling out their traffic or physical location from other nearby devices. Adoption of this technology, however, has been sporadic and varied across device manufacturers. In this paper, we present the first wide-scale study of MAC address randomization in the wild, including a detailed breakdown of different randomization techniques by operating system, manufacturer, and model of device. We then identify multiple flaws in these implementations which can be exploited to defeat randomization as performed by existing devices. First, we show that devices commonly make improper use of randomization by sending wireless frames with the true, global address when they should be using a randomized address. We move on to extend the passive identification techniques of Vanhoef et al. to effectively defeat randomization in ~96% of Android phones. Finally, we identify a previously unknown flaw in the way wireless chipsets handle low-level control frames which applies to 100% of devices we tested. This flaw permits an active attack that can be used under certain circumstances to track any existing wireless device.

Full time-division broadband communication system-based MIMO OFDM technology

In current broadband system schemes, such as VSF-OFCDM, TDD-MIMO-OFDM, TDD-CDM-OFDM and so on, CDMA or OFDMA was adopted as multi-access schemes. The channel estimation overhead and multiuser detection complexity, were the main factors that limited system performance in fast fading wireless channel access environments. So, the full time division cellular mobile communication system was given in this paper as a way out of the parlous issues in current broadband system design scheme. The most effective way out is to reduce channel estimation overhead as possible and avoid multi-access interferences. Moreover, dissymmetrical multimedia data service is the dominate service for next generation communication systems. The time slot structure of wireless frame and system parameters for the proposed system scheme, were also described in this paper. According to numerical analysis results for system capacities, better system diversity and capacity could be achieved by the presented future broadband system scheme.

Standing in Line Behavior Extraction Method by Radio Information

Abstract Wireless communication devices such as smartphones are essential in our recent daily life. The devices are also able to apply to understand human behaviors besides connecting a network via high speed communication links. One of such network services includes public wireless LAN services. The service is provided at many public spaces and stores. The stores especially need some added values by the public wireless LAN service. Concrete services such as avoiding disasters and inducement customers via coupons already have begun at many stores in Japan. This study proposes the extraction method of human's standing in line behavior to contribute increasing added values of public wireless LAN services at several stores. The shop owners are able to know how long the standing in line in front of their shops and provide appropriate services to their customers. This study uses wireless LAN frame data on the air. The estimation model with Bayesian estimation method is applied by using the received signal strength in actual wireless LAN frames. It achieved high accuracy of 0.868 through the evaluation experiment by 5-fold cross validation.

Detection of WPS Attacks Based on Multiscale Traffic Analysis

The worldwide adoption of the IEEE 802.11 standard as the solution to provide efficient network coverage with high data-rates raised several security concerns. In a first stage, Wired Equivalent Privacy (WEP) was used to protect wireless networks from intrusions, whose main motivations ranged from simply getting free Internet access to the perpetration of complex attacks in order to retrieve confidential information. However, due to its multiple technical flaws, this approach was not sufficient, leading to the emergence of the Wi-Fi Protected Access (WPA) and WPA2 technologies, which provided more secure mechanisms at the cost of requiring complicated configuration tasks. In order to create a simple configuration interface, the Wi-Fi Alliance proposed a simple configuration approach: the Wi-Fi Protected Setup (WPS), which is used by major network products manufacturers and provides a much easier configuration setup, although in a less efficient security environment. Actually, this implementation is vulnerable to brute force attacks, which are very quick to execute, have little complexity and are difficult to detect. After cracking WPS, attackers can access to WPA/WPA2 login information and illicitly connect to the target wireless network. There are several technical requirements and legal constrains that limit access to the contents of wireless frames, thus preventing their deep analysis. This paper presents a method to detect attacks over WPA-enabled routers with Wi-Fi Protected Setup based only on the amount of generated traffic. The detection methodology uses a monitoring station that exclusively analyzes traffic flows from the router: by monitoring traffic and using a multiscale analysis procedure, the approach is able to accurately identify each intrusion attempt. Keywords: Traffic identification, wavelet transform, scalogram, Wi-Fi, WPS.Traffic identification, wavelet transform, scalogram, Wi-Fi, WPS.Traffic identification, wavelet transform, scalogram, Wi-Fi, WPS.

IEEE 802.11s: The WLAN Mesh Standard

The wireless local area network standard IEEE 802.11 is the preferred solution for lowcost data services. Key to its success are the 2.4 and 5 GHz unlicensed bands. The transmit power limitations imposed due to regulatory requirements limit the range (coverage) that can be achieved by WLANs in these bands. However, the demand for larger wireless infrastructure is emerging, ranging from office/university campuses to city-wide deployments. To overcome the limitations of singlehop communication, data packets need to traverse over multiple wireless hops, and wireless mesh networks are called for. Since 2004 Task Group S has been developing an amendment to the 802.11 standard to exactly address the aforementioned need for multihop communication. Besides introducing wireless frame forwarding and routing capabilities at the MAC layer, the 802.11s amendment brings new interworking and security. In this article, we provide insights into the latest developments in 802.11s and explain how the overall mesh concept fits into the 802 set of networking standards.

A Sidelobe Suppression Technique by Regenerating Null Signals in OFDM-Based Cognitive Radios

In this paper, a sidelobe suppression technique for orthogonal frequency division multiplexing (OFDM)-based cognitive radios (CR) is proposed. In the OFDM-based CR systems, after the CR terminal executes spectrum sensing, it transmits a CR packet by activating the subcarriers in the frequency bands where no signals are detected (hereinafter, these subcarriers are called “active subcarrier”) and by disabling (nulling) the subcarriers in the frequency bands where the signals are detected. In this situation, a problem arises in that the signals that leak from the active subcarriers to the null subcarriers may interfere with the primary systems. Therefore, this signal leakage has to be minimized. In many OFDM-based wireless communication systems, one packet or frame consists of multiple OFDM symbols and the discontinuity between the consecutive OFDM symbols causes the signal leakage to the null subcarriers. In the proposed method, signal leakage to the null subcarriers is suppressed by regenerating null subcarriers in the frequency-domain signal of the whole packet as follows. One CR packet consisting of multiple OFDM symbols having null subcarriers and guard interval (GI) is buffered and oversampled, and then the oversampled signal is Fourier transformed at once and consequently the frequency-domain signal of the packet is obtained. The null subcarriers in the frequency-domain signal are zeroed again, and then the signal is inverse Fourier transformed and transmitted. The proposed method significantly suppresses the signal leakage. The spectral power density, the peak-to-average power ratio (PAPR) and the packet error rate (PER) performances of the proposed method are evaluated by computer simulations and the effectiveness of the proposed method is shown.

Remote analysis of a distributed WLAN using passive wireless-side measurement

This paper presents network traffic measurements from a campus-wide wireless LAN (WLAN), with the data collected using remote passive wireless-side measurement. We used commercially-available monitoring devices to collect wireless traffic concurrently from 9 selected locations on the campus WLAN for 6 weeks. The aggregate trace contains almost 1 billion wireless frames, representing the WLAN activity generated by 6775 users and 97 access points. Analysis of the dataset identifies similarities and differences in the user behaviours across the observed WLAN locations, as well as emerging trends in WLAN usage regarding application usage and session mobility. Our study extends existing WLAN measurement studies by providing deeper insights into how WLANs are used, and by developing models of WLAN usage characteristics that are applicable in capacity planning, network testing, and network simulation studies.