Wi-Fi access denial of service attack to smartphones Online publication date: Tue, 19-Nov-2013
by Erich Dondyk; Louis Rivera; Cliff C. Zou
International Journal of Security and Networks (IJSN), Vol. 8, No. 3, 2013
Abstract: This paper presents a novel denial-of-service attack targeted at popular smartphones. This type of attack, which we call a Denial-of-Convenience (DoC) attack, prevents non-technical savvy victims from utilising data services by exploiting the Wi-Fi connectivity protocol of smartphones. By setting up a fake Wi-Fi access point without internet access, an attacker can prompt a smartphone to automatically terminate a valid mobile broadband connection. Thus, preventing the targeted smartphone from having internet access unless the victim is capable of identifying the attack and manually disable the Wi-Fi features. We demonstrate that most popular smartphones, including Android and iPhone phones, are vulnerable to DoC attacks. To address this attack we propose, implement, and evaluate a novel validation protocol that uses the cellular network to send a secret key phrase to an internet validation server. Then, attempts to retrieve it via the newly established Wi-Fi channel to validate the Wi-Fi access point.
Existing subscribers:
Go to Inderscience Online Journals to access the Full Text of this article.
If you are not a subscriber and you just want to read the full contents of this article, buy online access here.Complimentary Subscribers, Editors or Members of the Editorial Board of the International Journal of Security and Networks (IJSN):
Login with your Inderscience username and password:
Want to subscribe?
A subscription gives you complete access to all articles in the current issue, as well as to all articles in the previous three years (where applicable). See our Orders page to subscribe.
If you still need assistance, please email subs@inderscience.com
Our Blog 
Follow us on Twitter 
Visit us on Facebook