Abstract
SMS-timing-based location inference attacks leverage timing side channels to ascertain a target's location. Prior work has primarily relied on a single-sender approach, employing only one SMS attacker from a specific location to infer the victim's whereabouts. However, this method exhibits several drawbacks. In this research, we systematically enumerate the limitations of the single-sender approach, which prompted us to explore a multi-sender strategy. Our investigation delves into the feasibility of an attacker employing multiple SMS senders towards a victim to address these limitations and introduces novel features to bolster prediction accuracy. Through exhaustive experimentation, we demonstrate that strategically positioned multiple SMS senders significantly enhance the location-inference accuracy, achieving a 142% improvement for four distinct classes of potential victim locations. This work further highlights the need to develop mitigations against SMS-timing-based location inference attacks.
Original language | English |
---|---|
Title of host publication | Proceedings of the 18th USENIX WOOT Conference on Offensive Technologies, WOOT 2024 |
Publisher | USENIX Association |
Pages | 59-73 |
Number of pages | 15 |
ISBN (Print) | 9781939133434 |
DOIs | |
Publication status | Published - 2024 |
Event | 18th USENIX WOOT Conference on Offensive Technologies (WOOT) - Philadelphia Marriott Downtown, Philadelphia, United States Duration: 12 Aug 2024 → 13 Aug 2024 Conference number: 18th https://www.usenix.org/conference/woot24 |
Conference
Conference | 18th USENIX WOOT Conference on Offensive Technologies (WOOT) |
---|---|
Abbreviated title | WOOT2024 |
Country/Territory | United States |
City | Philadelphia |
Period | 12/08/24 → 13/08/24 |
Internet address |