Amplifying Threats: The Role of Multi-Sender Coordination in SMS-Timing-Based Location Inference Attacks

Evangelos Bitsikas*, Theodor Schnitzler, Christina Pöpper, Aanjhan Ranganathan*

*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingConference article in proceedingAcademicpeer-review

Abstract

SMS-timing-based location inference attacks leverage timing side channels to ascertain a target's location. Prior work has primarily relied on a single-sender approach, employing only one SMS attacker from a specific location to infer the victim's whereabouts. However, this method exhibits several drawbacks. In this research, we systematically enumerate the limitations of the single-sender approach, which prompted us to explore a multi-sender strategy. Our investigation delves into the feasibility of an attacker employing multiple SMS senders towards a victim to address these limitations and introduces novel features to bolster prediction accuracy. Through exhaustive experimentation, we demonstrate that strategically positioned multiple SMS senders significantly enhance the location-inference accuracy, achieving a 142% improvement for four distinct classes of potential victim locations. This work further highlights the need to develop mitigations against SMS-timing-based location inference attacks.
Original languageEnglish
Title of host publicationProceedings of the 18th USENIX WOOT Conference on Offensive Technologies, WOOT 2024
PublisherUSENIX Association
Pages59-73
Number of pages15
ISBN (Print)9781939133434
DOIs
Publication statusPublished - 2024
Event18th USENIX WOOT Conference on Offensive Technologies (WOOT) - Philadelphia Marriott Downtown, Philadelphia, United States
Duration: 12 Aug 202413 Aug 2024
Conference number: 18th
https://www.usenix.org/conference/woot24

Conference

Conference18th USENIX WOOT Conference on Offensive Technologies (WOOT)
Abbreviated titleWOOT2024
Country/TerritoryUnited States
CityPhiladelphia
Period12/08/2413/08/24
Internet address

Fingerprint

Dive into the research topics of 'Amplifying Threats: The Role of Multi-Sender Coordination in SMS-Timing-Based Location Inference Attacks'. Together they form a unique fingerprint.

Cite this