| 摘要 |
Spoof attacks on location based beacons are detected. A stream of beacons (e.g., iBeacons) comprising at least a unique source identifier is generated. The stream of beacons is broadcast over a wireless communication channel to mobile devices within range. A list of broadcasted beacons is stored in a table along with a time and location of broadcast. Subsequent to broadcasting, a stream of beacons is detected. The detected beacon stream comprises a unique source identifier along with a time and a location of broadcast. The unique source identifier, the time and the location of at least one beacon of the detected beacon stream can be compared to the unique source identifier, the time and the location of at least one beacon of the broadcast beacon stream. Responsive to a match between the unique source identifiers and a mismatch of at least one of the time and locations, it is determined that the broadcast beacon stream has been spoofed by the detected beacon stream. Once a spoof has been detected, various remediation actions can be taken, such as sending alerts to admin, cautioning end users, and other security mode procedures. |
| 主权项 |
1. A computer-implemented method in a wireless networking device for detecting spoof attacks of location broadcasting beacons, the method comprising the steps of:
generating a stream of beacons comprising at least a unique source identifier; broadcasting the stream of beacons over a wireless communication channel; storing a list of broadcasted beacons along with a time and location of broadcast; subsequent to broadcasting, detecting a stream of beacons, the detected beacon stream comprising at least a unique source identifier along with a time and a location of broadcast; comparing the unique source identifier, the time and the location of at least one beacon of the detected beacon stream to the unique source identifier, the time and the location of at least one beacon of the broadcast beacon stream; and responsive to a match between the unique source identifiers and a mismatch of at least one of the time and locations, determining that the broadcast beacon stream has been spoofed by the detected beacon stream. |
