SCAFFISD: A scalable framework for fine-grained identification and security detection of wireless routers

Fangzhou Zhu; Liang Liu; Weizhi Meng; Ting Lv; Simin Hu; Renjun Ye

doi:10.1109/TrustCom50675.2020.00160

SCAFFISD: A scalable framework for fine-grained identification and security detection of wireless routers

Fangzhou Zhu, Liang Liu, Weizhi Meng, Ting Lv, Simin Hu, Renjun Ye

Department of Applied Mathematics and Computer Science

Nanjing University of Aeronautics and Astronautics

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

Abstract

The security of wireless network devices has received widespread attention, but most existing schemes cannot achieve fine-grained device identification. In practice, the security vulnerabilities of a device are heavily depending on its model and firmware version. Motivated by this issue, we propose a universal, extensible and device-independent framework called SCAFFISD, which can provide fine-grained identification of wireless routers. It can generate access rules to extract effective information from the router admin page automatically and perform quick scans for known device vulnerabilities. Meanwhile, SCAFFISD can identify rogue access points (APs) in combination with existing detection methods, with the purpose of performing a comprehensive security assessment of wireless networks. We implement the prototype of SCAFFISD and verify its effectiveness through security scans of actual products.

Original language	English
Title of host publication	Proceedings of 19^th IEEE International Conference on Trust, Security and Privacy in Computing and Communications
Publisher	IEEE
Publication date	Dec 2020
Pages	1194-1199
ISBN (Print)	9780738143804
DOIs	https://doi.org/10.1109/TrustCom50675.2020.00160
Publication status	Published - Dec 2020
Event	19th IEEE International Conference on Trust, Security and Privacy in Computing and Communications - Guangzhou, China Duration: 29 Dec 2020 → 1 Jan 2021 Conference number: 19

Conference

Conference	19th IEEE International Conference on Trust, Security and Privacy in Computing and Communications
Number	19
Country/Territory	China
City	Guangzhou
Period	29/12/2020 → 01/01/2021

Bibliographical note

Funding Information:
This work is supported by the Aeronautical Science Foundation of China under Grant 20165515001, the National Natural Science Foundation of China under Grant No.61402225, State Key Laboratory for smart grid protection and operation control Foundation, and the Science and Technology Funds from National State Grid Ltd.(The Research on Key Technologies of Distributed Parallel Database Storage and Processing based on Big Data). Weizhi Meng is also supported by H2020-SUICT- 03-2018: CyberSec4Europe.

Funding Information:
ACKNOWLEDGEMENT This work is supported by the Aeronautical Science Foundation of China under Grant 20165515001, the National Natural Science Foundation of China under Grant No.61402225, State Key Laboratory for smart grid protection and operation control Foundation, and the Science and Technology Funds from National State Grid Ltd.(The Research on Key Technologies of Distributed Parallel Database Storage and Processing based on Big Data). Weizhi Meng is also supported by H2020-SUICT-03-2018: CyberSec4Europe.

Publisher Copyright:
© 2020 IEEE.

Keywords

Access Point
Device Identification
Router
Vulnerability
Wireless Network

Access to Document

10.1109/TrustCom50675.2020.00160

OpenUrl availability

Full text

Cite this

@inproceedings{651fefaef93d411c9b456da9b27e8a58,

title = "SCAFFISD: A scalable framework for fine-grained identification and security detection of wireless routers",

abstract = "The security of wireless network devices has received widespread attention, but most existing schemes cannot achieve fine-grained device identification. In practice, the security vulnerabilities of a device are heavily depending on its model and firmware version. Motivated by this issue, we propose a universal, extensible and device-independent framework called SCAFFISD, which can provide fine-grained identification of wireless routers. It can generate access rules to extract effective information from the router admin page automatically and perform quick scans for known device vulnerabilities. Meanwhile, SCAFFISD can identify rogue access points (APs) in combination with existing detection methods, with the purpose of performing a comprehensive security assessment of wireless networks. We implement the prototype of SCAFFISD and verify its effectiveness through security scans of actual products.",

keywords = "Access Point, Device Identification, Router, Vulnerability, Wireless Network",

author = "Fangzhou Zhu and Liang Liu and Weizhi Meng and Ting Lv and Simin Hu and Renjun Ye",

note = "Funding Information: This work is supported by the Aeronautical Science Foundation of China under Grant 20165515001, the National Natural Science Foundation of China under Grant No.61402225, State Key Laboratory for smart grid protection and operation control Foundation, and the Science and Technology Funds from National State Grid Ltd.(The Research on Key Technologies of Distributed Parallel Database Storage and Processing based on Big Data). Weizhi Meng is also supported by H2020-SUICT- 03-2018: CyberSec4Europe. Funding Information: ACKNOWLEDGEMENT This work is supported by the Aeronautical Science Foundation of China under Grant 20165515001, the National Natural Science Foundation of China under Grant No.61402225, State Key Laboratory for smart grid protection and operation control Foundation, and the Science and Technology Funds from National State Grid Ltd.(The Research on Key Technologies of Distributed Parallel Database Storage and Processing based on Big Data). Weizhi Meng is also supported by H2020-SUICT-03-2018: CyberSec4Europe. Publisher Copyright: {\textcopyright} 2020 IEEE.; 19th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2020 ; Conference date: 29-12-2020 Through 01-01-2021",

year = "2020",

month = dec,

doi = "10.1109/TrustCom50675.2020.00160",

language = "English",

isbn = "9780738143804",

pages = "1194--1199",

booktitle = "Proceedings of 19th IEEE International Conference on Trust, Security and Privacy in Computing and Communications",

publisher = "IEEE",

address = "United States",

}

Zhu, F, Liu, L, Meng, W, Lv, T, Hu, S & Ye, R 2020, SCAFFISD: A scalable framework for fine-grained identification and security detection of wireless routers. in Proceedings of 19^th IEEE International Conference on Trust, Security and Privacy in Computing and Communications. IEEE, pp. 1194-1199, 19th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, Guangzhou, China, 29/12/2020. https://doi.org/10.1109/TrustCom50675.2020.00160

SCAFFISD: A scalable framework for fine-grained identification and security detection of wireless routers. / Zhu, Fangzhou; Liu, Liang; Meng, Weizhi et al.
Proceedings of 19^th IEEE International Conference on Trust, Security and Privacy in Computing and Communications. IEEE, 2020. p. 1194-1199.

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

TY - GEN

T1 - SCAFFISD

T2 - 19th IEEE International Conference on Trust, Security and Privacy in Computing and Communications

AU - Zhu, Fangzhou

AU - Liu, Liang

AU - Meng, Weizhi

AU - Lv, Ting

AU - Hu, Simin

AU - Ye, Renjun

N1 - Conference code: 19

PY - 2020/12

Y1 - 2020/12

N2 - The security of wireless network devices has received widespread attention, but most existing schemes cannot achieve fine-grained device identification. In practice, the security vulnerabilities of a device are heavily depending on its model and firmware version. Motivated by this issue, we propose a universal, extensible and device-independent framework called SCAFFISD, which can provide fine-grained identification of wireless routers. It can generate access rules to extract effective information from the router admin page automatically and perform quick scans for known device vulnerabilities. Meanwhile, SCAFFISD can identify rogue access points (APs) in combination with existing detection methods, with the purpose of performing a comprehensive security assessment of wireless networks. We implement the prototype of SCAFFISD and verify its effectiveness through security scans of actual products.

AB - The security of wireless network devices has received widespread attention, but most existing schemes cannot achieve fine-grained device identification. In practice, the security vulnerabilities of a device are heavily depending on its model and firmware version. Motivated by this issue, we propose a universal, extensible and device-independent framework called SCAFFISD, which can provide fine-grained identification of wireless routers. It can generate access rules to extract effective information from the router admin page automatically and perform quick scans for known device vulnerabilities. Meanwhile, SCAFFISD can identify rogue access points (APs) in combination with existing detection methods, with the purpose of performing a comprehensive security assessment of wireless networks. We implement the prototype of SCAFFISD and verify its effectiveness through security scans of actual products.

KW - Access Point

KW - Device Identification

KW - Router

KW - Vulnerability

KW - Wireless Network

U2 - 10.1109/TrustCom50675.2020.00160

DO - 10.1109/TrustCom50675.2020.00160

M3 - Article in proceedings

AN - SCOPUS:85101228005

SN - 9780738143804

SP - 1194

EP - 1199

BT - Proceedings of 19th IEEE International Conference on Trust, Security and Privacy in Computing and Communications

PB - IEEE

Y2 - 29 December 2020 through 1 January 2021

ER -

SCAFFISD: A scalable framework for fine-grained identification and security detection of wireless routers

Abstract

Conference

Bibliographical note

Keywords

Access to Document

OpenUrl availability

Fingerprint

Cite this