Department of Convergence Security Engineering, Sungshin University, Seoul 02844, Korea.
Department of Computer Engineering, Pai Chai University Daejeon 35345, Korea.
Sensors (Basel). 2020 Apr 5;20(7):2043. doi: 10.3390/s20072043.
Wi-Fi technology connects sensor-based things that operate with small batteries, and allows them to access the Internet from anywhere at any time and perform networking. It has become a critical element in many areas of daily life and industry, including smart homes, smart factories, smart grids, and smart cities. The Wi-Fi-based Internet of things is gradually expanding its range of uses from new industries to areas that are intimately connected to people's lives, safety, and property. Wi-Fi technology has undergone a 20-year standardization process and continues to evolve to improve transmission speeds and service quality. Simultaneously, it has also been strengthening power-saving technology and security technology to improve energy efficiency and security while maintaining backward compatibility with past standards. This study analyzed the security vulnerabilities of the Wi-Fi power-saving mechanism used in smart devices and experimentally proved the feasibility of a battery draining attack (BDA) on commercial smartphones. The results of the experiment showed that when a battery draining attack was performed on power-saving Wi-Fi, 14 times the amount of energy was consumed compared with when a battery draining attack was not performed. This study analyzed the security vulnerabilities of the power-saving mechanism and discusses countermeasures.
Wi-Fi 技术连接了使用小电池运行的基于传感器的设备,使它们能够随时随地访问互联网并进行网络连接。它已成为日常生活和工业许多领域的关键要素,包括智能家居、智能工厂、智能电网和智能城市。基于 Wi-Fi 的物联网正逐渐将其应用范围从新兴产业扩展到与人们的生活、安全和财产密切相关的领域。Wi-Fi 技术经历了 20 年的标准化过程,不断演进以提高传输速度和服务质量。同时,它还加强了节能技术和安全技术,在保持与过去标准向后兼容的同时,提高了能源效率和安全性。本研究分析了智能设备中使用的 Wi-Fi 节能机制的安全漏洞,并通过实验证明了对商业智能手机进行电池耗尽攻击(BDA)的可行性。实验结果表明,对节能 Wi-Fi 进行电池耗尽攻击时,消耗的能量是未进行电池耗尽攻击时的 14 倍。本研究分析了节能机制的安全漏洞,并讨论了相应的对策。