A Signal Injection Attack Against Zero Involvement Pairing and Authentication for the Internet of Things
arxiv(2024)
摘要
Zero Involvement Pairing and Authentication (ZIPA) is a promising technique
for autoprovisioning large networks of Internet-of-Things (IoT) devices. In
this work, we present the first successful signal injection attack on a ZIPA
system. Most existing ZIPA systems assume there is a negligible amount of
influence from the unsecured outside space on the secured inside space. In
reality, environmental signals do leak from adjacent unsecured spaces and
influence the environment of the secured space. Our attack takes advantage of
this fact to perform a signal injection attack on the popular Schurmann Sigg
algorithm. The keys generated by the adversary with a signal injection attack
at 95 dBA is within the standard error of the legitimate device.
更多查看译文
AI 理解论文
溯源树
样例
生成溯源树,研究论文发展脉络
Chat Paper
正在生成论文摘要