A New MAC Address Spoofing Detection Technique Based on Random Forests
Loading...
Authors
Alotaibi, Bandar
Elleithy, Khaled M.
Issue Date
2016-02-24
Type
Article
Language
en_US
Keywords
Medium access control (MAC) address , Spoofing , Detection , Random forests , Wireless sensor networks (WSN) , Wireless local area networks (WLAN)
Alternative Title
Abstract
Media access control (MAC) addresses in wireless networks can be trivially spoofed using off-the-shelf devices. The aim of this research is to detect MAC address spoofing in wireless networks using a hard-to-spoof measurement that is correlated to the location of the wireless device, namely the received signal strength (RSS). We developed a passive solution that does not require modification for standards or protocols. The solution was tested in a live test-bed (i.e., a wireless local area network with the aid of two air monitors acting as sensors) and achieved 99.77%, 93.16% and 88.38% accuracy when the attacker is 8–13 m, 4–8 m and less than 4 m away from the victim device, respectively. We implemented three previous methods on the same test-bed and found that our solution outperforms existing solutions. Our solution is based on an ensemble method known as random forests.
Description
Citation
Alotaibi, B.; Elleithy, K. A New MAC Address Spoofing Detection Technique Based on Random Forests. Sensors 2016, 16, 281.
Publisher
MDPI