Time of Flight and Fingerprinting Based Methods for Wireless Rogue Device Detection

Existing network detection techniques rely on SSIDs, network patterns or MAC addresses of genuine wireless devices to identify malicious attacks on the network. However, these device characteristics can be manipulated posing a security threat to information integrity, lowering detection accuracy, and weakening device protection. This research study focuses on empirical analysis to elaborate the relationship between received signal strength (RSSI) and distance; investigates methods to detect rogue devices and access points on Wi-Fi networks using network traffic analysis and fingerprint identification methods. In this paper, we conducted three experiments to evaluate the performance of RSSI and clock skews as features to detect rogue devices for indoor and outdoor locations. Results from the experiments suggest different devices connected to the same access point can be detected (p \u3c 0.05) using RSSI values. However, the magnitude of the difference was not consistent as devices were placed further from the same access point. Therefore, an optimal distance for maximizing the detection rate requires further examination. The random forest classifier provided the best performance with a mean accuracy of 79% across all distances. Our experiment on clock skew shows improved accuracy in using beacon timestamps to detect rogue APs on the network

Symphony: Localizing Multiple Acoustic Sources with a Single Microphone Array

Sound recognition is an important and popular function of smart devices. The location of sound is basic information associated with the acoustic source. Apart from sound recognition, whether the acoustic sources can be localized largely affects the capability and quality of the smart device's interactive functions. In this work, we study the problem of concurrently localizing multiple acoustic sources with a smart device (e.g., a smart speaker like Amazon Alexa). The existing approaches either can only localize a single source, or require deploying a distributed network of microphone arrays to function. Our proposal called Symphony is the first approach to tackle the above problem with a single microphone array. The insight behind Symphony is that the geometric layout of microphones on the array determines the unique relationship among signals from the same source along the same arriving path, while the source's location determines the DoAs (direction-of-arrival) of signals along different arriving paths. Symphony therefore includes a geometry-based filtering module to distinguish signals from different sources along different paths and a coherence-based module to identify signals from the same source. We implement Symphony with different types of commercial off-the-shelf microphone arrays and evaluate its performance under different settings. The results show that Symphony has a median localization error of 0.694m, which is 68% less than that of the state-of-the-art approach

Practical server-side WiFi-based indoor localization: Addressing cardinality & outlier challenges for improved occupancy estimation

National Research Foundation (NRF) Singapore under International Research Centres in Singapore Funding Initiativ

Improving a wireless localization system via machine learning techniques and security protocols

The recent advancements made in Internet of Things (IoT) devices have brought forth new opportunities for technologies and systems to be integrated into our everyday life. In this work, we investigate how edge nodes can effectively utilize 802.11 wireless beacon frames being broadcast from pre-existing access points in a building to achieve room-level localization. We explain the needed hardware and software for this system and demonstrate a proof of concept with experimental data analysis. Improvements to localization accuracy are shown via machine learning by implementing the random forest algorithm. Using this algorithm, historical data can train the model and make more informed decisions while tracking other nodes in the future. We also include multiple security protocols that can be taken to reduce the threat of both physical and digital attacks on the system. These threats include access point spoofing, side channel analysis, and packet sniffing, all of which are often overlooked in IoT devices that are rushed to market. Our research demonstrates the comprehensive combination of affordability, accuracy, and security possible in an IoT beacon frame-based localization system that has not been fully explored by the localization research community

Privacy-Preserving by Design: Indoor Positioning System Using Wi-Fi Passive TDOA

Indoor localization systems have become increasingly important in a wide range of applications, including industry, security, logistics, and emergency services. However, the growing demand for accurate localization has heightened concerns over privacy, as many localization systems rely on active signals that can be misused by an adversary to track users' movements or manipulate their measurements. This paper presents PassiFi, a novel passive Wi-Fi time-based indoor localization system that effectively balances accuracy and privacy. PassiFi uses a passive WiFi Time Difference of Arrival (TDoA) approach that ensures users' privacy and safeguards the integrity of their measurement data while still achieving high accuracy. The system adopts a fingerprinting approach to address multi-path and non-line-of-sight problems and utilizes deep neural networks to learn the complex relationship between TDoA and location. Evaluation in a real-world testbed demonstrates PassiFi's exceptional performance, surpassing traditional multilateration by 128%, achieving sub-meter accuracy on par with state-of-the-art active measurement systems, all while preserving privacy

Passive radar based on WiFi transmissions: signal processing schemes and experimental results

Aim of this work is to study innovative techniques and processing strategies for a new passive sensor for short range surveillance. The principle of work of the sensor will be based on the passive radar principle, and WiFi transmissions - which usually provide Internet access within local areas - will be exploited by the passive sensor to detect, localize and classify targets

Passive radar based on WiFi transmissions: signal processing schemes and experimental results

Aim of this work is to study innovative techniques and processing strategies for a new passive sensor for short range surveillance. The principle of work of the sensor will be based on the passive radar principle, and WiFi transmissions - which usually provide Internet access within local areas - will be exploited by the passive sensor to detect, localize and classify targets

Automatic Wi-Fi Fingerprint System based on Unsupervised Learning

Recently, smartphones and Wi-Fi appliances have been generalized in daily life, and location-based service(LBS) has gradually been extended to indoor environments. Unlike outdoor positioning, which is typically handled by the global positioning system(GPS), indoor positioning technologies for providing LBSs have been studied with algorithms using various short-range wireless communications such as Wi-Fi, Ultra-wideband, Bluetooth, etc. Fingerprint-based positioning technology, a representative indoor LBS, estimates user locations using the received signal strength indicator(RSSI), indicating the relative transmission power of the access point(AP). Therefore, a fingerprint-based algorithm has the advantage of being robust to distorted wireless environments, such as radio wave reflections and refractions, compared to the time-of-arrival(TOA) method for non-line-of-sight(NLOS), where many obstacles exist. Fingerprint is divided into a training phase in which a radio map is generated by measuring the RSSIs of all indoor APs and positioning phase in which the positions of users are estimated by comparing the RSSIs of the generated radio map in real-time. In the training phase, the user collects the RSSIs of all APs measured at reference points set at regular intervals of 2 to 3m, creating a radio map. In the positioning phase, the reference point, which is most similar to the RSSI, compares the generated radio map from the training phase to the RSSI measured from user movements. This estimates the real-time indoor position. Fingerprint algorithms based on supervised and semi-supervised learning such as support vector machines and principal component analysis are essential for measuring the RSSIs in all indoor areas to produce a radio map. As the building size and the complexity of structures increases, the amount of work and time required also increase. The radio map generation algorithm that uses channel modeling does not require direct measurement, but it requires considerable effort because of building material, three-dimensional reflection coefficient, and numerical modeling of all obstacles. To overcome these problems, this thesis proposes an automatic Wi-Fi fingerprint system that combines an unsupervised dual radio mapping(UDRM) algorithm that reduces the time taken to acquire Wi-Fi signals and leverages an indoor environment with a minimum description length principle(MDLP)-based radio map feedback(RMF) algorithm to simultaneously optimize and update the radio map. The proposed UDRM algorithm in the training phase generates a radio map of the entire building based on the measured radio map of one reference floor by selectively applying the autoencoder and the generative adversarial network(GAN) according to the spatial structures. The proposed learning-based UDRM algorithm does not require labeled data, which is essential for supervised and semi-supervised learning algorithms. It has a relatively low dependency on RSSI datasets. Additionally, it has a high accuracy of radio map prediction than existing models because it learns the indoor environment simultaneously via a indoor two-dimensional map(2-D map). The produced radio map is used to estimate the real-time positioning of users in the positioning phase. Simultaneously, the proposed MDLP-based RMF algorithm analyzes the distribution characteristics of the RSSIs of newly measured APs and feeds the analyzed results back to the radio map. The MDLP, which is applied to the proposed algorithm, improves the performance of the positioning and optimizes the size of the radio map by preventing the indefinite update of the RSSI and by updating the newly added APs to the radio map. The proposed algorithm is compared with a real measurement-based radio map, confirming the high stability and accuracy of the proposed fingerprint system. Additionally, by generating a radio map of indoor areas with different structures, the proposed system is shown to be robust against the change in indoor environment, thus reducing the time cost. Finally, via a euclidean distance-based experiment, it is confirmed that the accuracy of the proposed fingerprint system is almost the same as that of the RSSI-based fingerprint system.|최근 스마트폰과 Wi-Fi가 실생활에 보편화되면서 위치기반 서비스에 대한 개발 분야가 실내 환경으로 점차 확대되고 있다. GPS로 대표되는 실외 위치 인식과 달리 위치기반 서비스를 제공하기 위한 실내 위치 인식 기술은 Wi-Fi, UWB, 블루투스 등과 같은 다양한 근거리 무선 통신 기반의 알고리즘들이 연구되고 있다. 대표적인 실내 위치인식 알고리즘 중 하나인 Fingerprint는 사용자가 수신한 AP 신호의 상대적인 크기를 나타내는 RSSI를 사용하여 위치를 추정한다. 따라서 Fingerprint기반의 알고리즘은 장애물이 많이 존재하는 비가시 거리에서 TOA 방식에 비해 전파의 반사 및 굴절과 같이 왜곡된 무선 환경에 강인하다는 장점이 있다. Fingerprint는 실내의 모든 AP의 RSSI들을 측정하여 Radio map을 제작하는 과정인 학습 단계와 생성된 Radio map의 RSSI들을 실시간으로 측정된 RSSI와 비교하여 사용자의 위치를 추정하는 위치인식 단계로 나누어진다. 학습 단계에서는 위치를 구분하기 위하여 사용자가 2~3m의 일정한 간격으로 설정된 참조 위치들마다 측정되는 모든 AP들의 RSSI를 수집하고 Radio map으로 제작한다. 위치인식 단계에서는 학습 단계에서 제작된 Radio map과 사용자의 이동에 의해 측정되는 RSSI의 비교를 통해 가장 유사한 RSSI 패턴을 가지는 참조 위치가 실시간 실내 위치로 추정된다. 서포트 벡터 머신(SVM), 주성분 분석(PCA) 등과 같이 지도 및 준지도 학습기반의 Fingerprint 알고리즘은 Radio map을 제작하기 위해 모든 실내 공간에서 RSSI의 측정이 필수적이다. 이러한 알고리즘들은 건물이 대형화되고 구조가 복잡해질수록 측정 공간이 늘어나면서 작업과 시간 소모가 또한 급격히 증가한다. 채널모델링을 통한 Radio map 생성 알고리즘은 직접적인 측정 과정이 불필요한 반면에 건물의 재질, 3차원적인 구조에 따른 반사 계수 및 모든 장애물에 대한 수치적인 모델링이 필수적이기 때문에 상당히 많은 작업량이 요구된다. 따라서 본 논문에서는 이러한 문제점들을 해결하고자 학습 단계에서 Wi-Fi 신호의 수집시간을 최소화하면서 실내 환경이 고려된 Unsupervised Dual Radio Mapping(UDRM) 알고리즘과 위치인식 단계에서 Radio map의 최적화가 동시에 가능한 Minimum description length principle(MDLP)기반의 Radio map Feedback(RMF) 알고리즘이 결합된 비지도학습기반의 자동 Wi-Fi Fingerprint를 제안한다. 학습 단계에서 제안하는 UDRM 알고리즘은 뉴럴 네트워크 기반의 비지도 학습 알고리즘인 Autoencoder와 Generative Adversarial Network (GAN)를 공간구조에 따라 선택적으로 적용하여 하나의 참조 층에서 측정된 Radio map을 기반으로 건물전체의 Radio map을 생성한다. 제안하는 비지도 학습 기반 UDRM 알고리즘은 지도 및 준지도 학습에서 필수적인 Labeled data가 필요하지 않으며 RSSI 데이터 세트의 의존성이 상대적으로 낮다. 또한 2차원 실내 지도를 통해 실내 환경을 동시에 학습하기 때문에 기존의 예측 모델에 비해 Radio map의 예측 정확도가 높다. 제안한 알고리즘에 의해 제작된 Radio map은 위치인식 단계에서 사용자의 실시간 위치인식에 적용된다. 동시에 제안하는 MDLP 기반의 자동 Wi-Fi 업데이트 알고리즘은 새롭게 측정되는 AP들의 RSSI의 분포특성을 분석하고 그 결과를 Radio map에 피드백한다. 제안한 알고리즘에 적용된 MDLP는 무분별한 RSSI의 업데이팅을 방지하고 추가되는 AP를 Radio map에 업데이트함으로서 위치인식의 성능을 향상시키고 Radio map의 크기의 최적화가 가능하다. 제안한 알고리즘은 실제 측정기반의 Radio map과 서로 비교를 통해 제안한 Fingerprint 시스템의 높은 안정성과 정확도를 확인하였다. 또한 구조가 다른 실내공간의 Radio map 생성 결과를 통해 실내 환경 변화에 강인함과 학습 시간 측정을 통한 시간 비용이 감소함을 확인하였다. 마지막으로 Euclidean distance 기반 실험을 통하여 실제 측정한 RSSI기반의 Fingerprint 시스템과 제안한 시스템의 위치인식 정확도가 거의 일치함을 확인하였다.Contents Contents ⅰ Lists of Figures and Tables ⅲ Abstract ⅵ Chapter 1 Introduction 01 1.1 Background and Necessity for Research 01 1.2 Objectives and Contents for Research 04 Chapter 2 Wi-Fi Positioning and Unsupervised Learning 07 2.1 Wi-Fi Positioning 07 2.1.1 Wi-Fi Signal and Fingerprint 07 2.1.2 Fingerprint Techniques 15 2.2 Unsupervised Learning 23 2.2.1 Neural Network 23 2.2.2 Autoencoder 28 2.2.3 Generative Adversarial Network 31 Chapter 3 Proposed Fingerprint System 36 3.1 Unsupervised Dual Radio Mapping Algorithm 36 3.2 MDLP-based Radio Map Feedback Algorithm 47 Chapter 4 Experiment and Result 51 4.1 Experimental Environment and Configuration 51 4.2 Results of Unsupervised Dual Radio Mapping Algorithm 56 4.2 Results of MDLP-based Radio Map Feedback Algorithm 69 Chapter 5 Conclusion 79 Reference 81Docto

Massive MIMO is a Reality -- What is Next? Five Promising Research Directions for Antenna Arrays

Massive MIMO (multiple-input multiple-output) is no longer a "wild" or "promising" concept for future cellular networks - in 2018 it became a reality. Base stations (BSs) with 64 fully digital transceiver chains were commercially deployed in several countries, the key ingredients of Massive MIMO have made it into the 5G standard, the signal processing methods required to achieve unprecedented spectral efficiency have been developed, and the limitation due to pilot contamination has been resolved. Even the development of fully digital Massive MIMO arrays for mmWave frequencies - once viewed prohibitively complicated and costly - is well underway. In a few years, Massive MIMO with fully digital transceivers will be a mainstream feature at both sub-6 GHz and mmWave frequencies. In this paper, we explain how the first chapter of the Massive MIMO research saga has come to an end, while the story has just begun. The coming wide-scale deployment of BSs with massive antenna arrays opens the door to a brand new world where spatial processing capabilities are omnipresent. In addition to mobile broadband services, the antennas can be used for other communication applications, such as low-power machine-type or ultra-reliable communications, as well as non-communication applications such as radar, sensing and positioning. We outline five new Massive MIMO related research directions: Extremely large aperture arrays, Holographic Massive MIMO, Six-dimensional positioning, Large-scale MIMO radar, and Intelligent Massive MIMO.Comment: 20 pages, 9 figures, submitted to Digital Signal Processin