Good Vibrations : Artificial Ambience-Based Relay Attack Detection. / Gurulian, Iakovos; Markantonakis, Konstantinos; Frank, Eibe; Akram, Raja Naeem.
2018. 1-9 Paper presented at The 17th IEEE International Conference On Trust, Security And Privacy In Computing And Communications, New York, United States.Research output: Contribution to conference › Paper › peer-review
Standard
Good Vibrations : Artificial Ambience-Based Relay Attack Detection. / Gurulian, Iakovos; Markantonakis, Konstantinos; Frank, Eibe; Akram, Raja Naeem.
2018. 1-9 Paper presented at The 17th IEEE International Conference On Trust, Security And Privacy In Computing And Communications, New York, United States.Research output: Contribution to conference › Paper › peer-review
Harvard
APA
Vancouver
Author
BibTeX
}
RIS
TY - CONF
T1 - Good Vibrations
T2 - The 17th IEEE International Conference On Trust, Security And Privacy In Computing And Communications
AU - Gurulian, Iakovos
AU - Markantonakis, Konstantinos
AU - Frank, Eibe
AU - Akram, Raja Naeem
PY - 2018
Y1 - 2018
N2 - Relay attacks are passive man in the middle attacks, aiming to extend the physical distance of devices involved in a transaction beyond their operating environment, within the restricted time-frame. In the field of smartphones, proposals have been put forward suggesting sensing the natural ambient environment as an effective Proximity and Relay Attack Detection (PRAD) mechanism. However, these proposals are not in compliance with industry imposed constraints (e.g.\ EMV and ITSO) mandating that transactions should complete within a certain time-frame (e.g.\ 500ms for EMV contactless transactions). The generation of an artificial ambient environment (AAE) using peripherals of the transaction devices has shown positive results when using infrared light as an AAE actuator. In this paper we propose the use of vibration as an alternative AAE actuator. We empirically evaluated the effectiveness of the proposed solution as a PRAD mechanism on an experimental test-bed that we deployed. A total of 36,000 genuine and relay attack transaction pairs were analysed using well-known machine learning algorithms. The results of our analysis indicate that the proposed solution is highly effective.
AB - Relay attacks are passive man in the middle attacks, aiming to extend the physical distance of devices involved in a transaction beyond their operating environment, within the restricted time-frame. In the field of smartphones, proposals have been put forward suggesting sensing the natural ambient environment as an effective Proximity and Relay Attack Detection (PRAD) mechanism. However, these proposals are not in compliance with industry imposed constraints (e.g.\ EMV and ITSO) mandating that transactions should complete within a certain time-frame (e.g.\ 500ms for EMV contactless transactions). The generation of an artificial ambient environment (AAE) using peripherals of the transaction devices has shown positive results when using infrared light as an AAE actuator. In this paper we propose the use of vibration as an alternative AAE actuator. We empirically evaluated the effectiveness of the proposed solution as a PRAD mechanism on an experimental test-bed that we deployed. A total of 36,000 genuine and relay attack transaction pairs were analysed using well-known machine learning algorithms. The results of our analysis indicate that the proposed solution is highly effective.
KW - Mobile Payments
KW - Mobile Ticketing
KW - Relay Attacks
KW - Ambient Environment Sensing
KW - Contactless
KW - Experimental Analysis
U2 - 10.1109/TrustCom/BigDataSE.2018.00075
DO - 10.1109/TrustCom/BigDataSE.2018.00075
M3 - Paper
SP - 1
EP - 9
Y2 - 31 July 2018 through 3 August 2018
ER -