SecureScan: Private and Secure WiFi Service Discovery

Research has shown that devices using the current WiFi standard are easily vulnerable to attacks which allow an adversary to compromise a user's privacy and security. A number of these vulnerabilities arise from the insecure design of the WiFi scanning protocol. This paper contributes a new wireless service discovery protocol, SecureScan, which improves both the privacy and security of the current WiFi implementation's scanning procedure. The safety and liveness properties of SecureScan are shown to hold formally under a Dolev-Yao adversary where the current WiFi implementation fails. Experimental results demonstrate that SecureScan provides strong privacy to mobile devices, approximately equivalent to being selected at random, at the cost of increasing message size and requiring more computational resources.已有研究表明，采用现行WiFi标准的设备极易遭受攻击，攻击者可借此侵害用户的隐私与安全。不少此类漏洞均源于WiFi扫描协议的不安全设计。本文提出一种新型无线服务发现协议SecureScan，可增强当前WiFi实现中扫描流程的隐私性与安全性。在多夫-姚敌手（Dolev-Yao Adversary）模型下，SecureScan的安全性与活性属性可被形式化证明成立，而当前的WiFi实现则无法满足该属性要求。实验结果表明，SecureScan可为移动设备提供极强的隐私保护，其隐私保护效果近似等同于随机选中设备时的隐私水平，不过代价是消息体积有所增加且需要更多计算资源。