1 / 10

Enhancing Wi-Fi Security: Thwarting Side-Channel Analysis via Traffic Demultiplexing

This ongoing research project, supervised by Prof. XiaoFeng Wang, focuses on mitigating side-channel information leaks in wireless networks. We explore threats arising from statistical analysis of encrypted traffic during activities like web browsing, video streaming, and VoIP. Current defense techniques have significant limitations due to communication overheads. Our innovative solution, Traffic Demultiplexing, aims to enhance data transmission security. The project collaborates with UNL, Microsoft Research, and McGill University, showcasing real-world deployment through a structured network setup.

sofia
Download Presentation

Enhancing Wi-Fi Security: Thwarting Side-Channel Analysis via Traffic Demultiplexing

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Thwarting Wi-Fi Side-Channel Analysis through Traffic Demultiplexing Yangyi Chen Supervisor: Prof. XiaoFeng Wang On-going research project in collaboration with UNL, Microsoft Research and McGill University

  2. Side-channel information leaks • Threats in different communication scenarios • Web browsing • http://www.youtube.com/user/mountmic#p/u/3/3sGH9KpYOJk • Video-streaming • Voice over-IP • Particularly serious in wireless networks (shared-medium nature) • Mostly caused by analyzing statistical characteristics of encrypted traffic • Distributions of packet sizes • Inter-packet timings

  3. Current defense techniques • Change the distribution of packet sizes • Padding packets • Faking superfluous packets • Chopping packets into fixed size segments • Traffic morphing • Limitations of those techniques • Significant communication overheads • Hard to deploy

  4. Our solution: Traffic Demultiplexing • Data transmission

  5. Our solution: Traffic Demultiplexing • A simple example Traffic on each interface PDF on each interface

  6. Design and implementation Network stack with three virtual interfaces

  7. Packets flow on receiver and sender sides

  8. Demultiplexing Scheduler:Masquerading Demultiplexing

  9. Real-world Deployment and Demo setup • Three laptops • First with our AP-side prototype driver installed, equipped with a Proxim AP-2000 11b/g Cardbus series. • Second with our Client-side prototype driver installed, equipped with D-link WNA-2330. Third with wireless card set to monitor mode and use Wireshark to collect traffic. • http://www.youtube.com/user/fccherry091?feature=mhum

  10. Thanks!

More Related