IRUS Total

UNVEIL: capture and visualise WiFi data leakages

File Description SizeFormat 
p3550-jain.pdfPublished version1.09 MBAdobe PDFView/Open
Title: UNVEIL: capture and visualise WiFi data leakages
Authors: Jain, S
Bensaid, E
De Montjoye, Y-A
Item Type: Conference Paper
Abstract: In the past few years, numerous privacy vulnerabilities have been discovered in the WiFi standards and their implementations for mobile devices. These vulnerabilities allow an attacker to collect large amounts of data on the device user, which could be used to infer sensitive information such as religion, gender, and sexual orientation. Solutions for these vulnerabilities are often hard to design and typically require many years to be widely adopted, leaving many devices at risk. In this paper, we present UNVEIL - an interactive and extendable platform to demonstrate the consequences of these attacks. The platform performs passive and active attacks on smartphones to collect and analyze data leaked through WiFi and communicate the analysis results to users through simple and interactive visualizations. The platform currently performs two attacks. First, it captures probe requests sent by nearby devices and combines them with public WiFi location databases to generate a map of locations previously visited by the device users. Second, it creates rogue access points with SSIDs of popular public WiFis (e.g. _Heathrow WiFi, Railways WiFi) and records the resulting internet traffic. This data is then analyzed and presented in a format that highlights the privacy leakage. The platform has been designed to be easily extendable to include more attacks and to be easily deployable in public spaces. We hope that UNVEIL will help raise public awareness of privacy risks of WiFi networks.
Issue Date: 3-May-2019
Date of Acceptance: 14-Feb-2019
URI: http://hdl.handle.net/10044/1/70380
DOI: https://dx.doi.org/10.1145/3308558.3314143
ISBN: 978-1-4503-6674-8
Publisher: ACM
Start Page: 3550
End Page: 3554
Journal / Book Title: Proceedings of the 2019 World Wide Web Conference (WWW ’19)
Copyright Statement: ©2019 IW3C2 (International World Wide Web Conference Committee), published under Creative Commons CC-BY 4.0 License (https://creativecommons.org/licenses/by/4.0/)
Conference Name: The Web Conference 2019
Publication Status: Published
Start Date: 2019-05-13
Finish Date: 2019-05-17
Conference Place: San Francisco, CA, USA
Online Publication Date: 2019-05-13
Appears in Collections:Computing