TY - GEN
T1 - Amplifying Threats
T2 - 18th USENIX WOOT Conference on Offensive Technologies, WOOT 2024
AU - Bitsikas, Evangelos
AU - Schnitzler, Theodor
AU - Pöpper, Christina
AU - Ranganathan, Aanjhan
N1 - Publisher Copyright:
© 2024 Proceedings of the 18th USENIX WOOT Conference on Offensive Technologies, WOOT 2024. All rights reserved.
PY - 2024
Y1 - 2024
N2 - SMS-timing-based location inference attacks leverage timing side channels to ascertain a target’s location. Prior work has primarily relied on a single-sender approach, employing only one SMS attacker from a specific location to infer the victim’s whereabouts. However, this method exhibits several drawbacks. In this research, we systematically enumerate the limitations of the single-sender approach, which prompted us to explore a multi-sender strategy. Our investigation delves into the feasibility of an attacker employing multiple SMS senders towards a victim to address these limitations and introduces novel features to bolster prediction accuracy. Through exhaustive experimentation, we demonstrate that strategically positioned multiple SMS senders significantly enhance the location-inference accuracy, achieving a 142% improvement for four distinct classes of potential victim locations. This work further highlights the need to develop mitigations against SMStiming-based location inference attacks.
AB - SMS-timing-based location inference attacks leverage timing side channels to ascertain a target’s location. Prior work has primarily relied on a single-sender approach, employing only one SMS attacker from a specific location to infer the victim’s whereabouts. However, this method exhibits several drawbacks. In this research, we systematically enumerate the limitations of the single-sender approach, which prompted us to explore a multi-sender strategy. Our investigation delves into the feasibility of an attacker employing multiple SMS senders towards a victim to address these limitations and introduces novel features to bolster prediction accuracy. Through exhaustive experimentation, we demonstrate that strategically positioned multiple SMS senders significantly enhance the location-inference accuracy, achieving a 142% improvement for four distinct classes of potential victim locations. This work further highlights the need to develop mitigations against SMStiming-based location inference attacks.
UR - http://www.scopus.com/inward/record.url?scp=85208046056&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=85208046056&partnerID=8YFLogxK
M3 - Conference contribution
AN - SCOPUS:85208046056
T3 - Proceedings of the 18th USENIX WOOT Conference on Offensive Technologies, WOOT 2024
SP - 59
EP - 73
BT - Proceedings of the 18th USENIX WOOT Conference on Offensive Technologies, WOOT 2024
PB - USENIX Association
Y2 - 12 August 2024 through 13 August 2024
ER -