{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T15:53:11Z","timestamp":1783439591990,"version":"3.54.6"},"reference-count":32,"publisher":"MDPI AG","issue":"16","license":[{"start":{"date-parts":[[2020,8,17]],"date-time":"2020-08-17T00:00:00Z","timestamp":1597622400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"National Key R&amp;D Program of China","award":["2018YFB0803400"],"award-info":[{"award-number":["2018YFB0803400"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Wi-Fi network has an open nature so that it needs to face greater security risks compared to wired network. The MAC address represents the unique identifier of the device, and is easily obtained by an attacker. Therefore MAC address randomization is proposed to protect the privacy of devices in a Wi-Fi network. However, implicit identifiers are used by attackers to identify user\u2019s device, which can cause the leakage of user\u2019s privacy. We propose device identification based on 802.11ac probe request frames. Here, a detailed analysis on the effectiveness of 802.11ac fields is given and a novel device identification method based on deep learning whose average f1-score exceeds 99% is presented. With a purpose of preventing attackers from obtaining relevant information by the device identification method above, we design a novel defense mechanism based on stream cipher. In that case, the original content of probe request frame is hidden by encrypting probe request frames and construction of probe request is reserved to avoid the finding of attackers. This defense mechanism can effectively reduce the performance of the proposed device identification method whose average f1-score is below 30%. In general, our research on attack and defense mechanism can preserve device privacy better.<\/jats:p>","DOI":"10.3390\/s20164620","type":"journal-article","created":{"date-parts":[[2020,8,17]],"date-time":"2020-08-17T21:58:53Z","timestamp":1597701533000},"page":"4620","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":19,"title":["Probe Request Based Device Identification Attack and Defense"],"prefix":"10.3390","volume":"20","author":[{"given":"Xiaolin","family":"Gu","sequence":"first","affiliation":[{"name":"School of Cyber Science and Engineering, Southeast University, Nanjing 211189, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenjia","family":"Wu","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Southeast University, Nanjing 211189, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaodan","family":"Gu","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Southeast University, Nanjing 211189, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9691-8702","authenticated-orcid":false,"given":"Zhen","family":"Ling","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Southeast University, Nanjing 211189, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ming","family":"Yang","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Southeast University, Nanjing 211189, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Aibo","family":"Song","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Southeast University, Nanjing 211189, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2020,8,17]]},"reference":[{"key":"ref_1","unstructured":"(2020, June 17). IoT Device Market to Reach $5.1 billion by 2025: Report. Available online: https:\/\/www.fierceelectronics.com\/iot-wireless\/iot-device-market-to-reach-5-1-billion-by-2025-report."},{"key":"ref_2","unstructured":"(2020, June 17). Common Vulnerabilities and Exposures. Available online: https:\/\/cve.mitre.org\/."},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Liu, P., Yang, P., Song, W.Z., Yan, Y., and Li, X.Y. (May, January 29). Real-time Identification of Rogue WiFi Connections Using Environment-Independent Physical Features. Proceedings of the IEEE INFOCOM 2019-IEEE Conference on Computer Communications, Paris, France.","DOI":"10.1109\/INFOCOM.2019.8737455"},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Hua, J., Sun, H., Shen, Z., Qian, Z., and Zhong, S. (2018, January 16\u201319). Accurate and efficient wireless device fingerprinting using channel state information. Proceedings of the IEEE INFOCOM 2018-IEEE Conference on Computer Communications, Honolulu, HI, USA.","DOI":"10.1109\/INFOCOM.2018.8485917"},{"key":"ref_5","first-page":"16","article-title":"Passive Data Link Layer 802.11 Wireless Device Driver Fingerprinting","volume":"3","author":"Franklin","year":"2006","journal-title":"USENIX Secur. Symp."},{"key":"ref_6","unstructured":"Desmond, L.C.C., Yuan, C.C., Pheng, T.C., and Lee, R.S. (April, January 31). Identifying unique devices through wireless fingerprinting. Proceedings of the First ACM Conference on Wireless Network Security, Alexandria, VA, USA."},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Waltari, O., and Kangasharju, J. (2016, January 25\u201330). The wireless shark: Identifying wifi devices based on probe fingerprints. Proceedings of the First Workshop on Mobile Data, Singapore.","DOI":"10.1145\/2935755.2935757"},{"key":"ref_8","unstructured":"Bratus, S., Cornelius, C., Kotz, D., and Peebles, D. (April, January 31). Active behavioral fingerprinting of wireless devices. Proceedings of the First ACM Conference on Wireless Network Security, Alexandria, VA, USA."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"6235484","DOI":"10.1155\/2017\/6235484","article-title":"Noncooperative 802.11 mac layer fingerprinting and tracking of mobile devices","volume":"2017","author":"Robyns","year":"2017","journal-title":"Secur. Commun. Netw."},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Pang, J., Greenstein, B., Gummadi, R., Seshan, S., and Wetherall, D. (2007, January 9\u201314). 802.11 user fingerprinting. Proceedings of the 13th Annual ACM International Conference on Mobile Computing and Networking, Montreal, QC, Canada.","DOI":"10.1145\/1287853.1287866"},{"key":"ref_11","unstructured":"Vanhoef, M., Matte, C., Cunche, M., Cardoso, L.S., and Piessens, F. (June, January 30). Why MAC address randomization is not enough: An analysis of Wi-Fi network discovery mechanisms. Proceedings of the 11th ACM on Asia Conference on Computer and Communications Security, Xi\u2019an, China."},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Greenstein, B., McCoy, D., Pang, J., Kohno, T., Seshan, S., and Wetherall, D. (2008, January 17\u201320). Improving wireless privacy with an identifier-free link layer protocol. Proceedings of the 6th International Conference on Mobile Systems, Applications, and Services, Breckenridge, CO, USA.","DOI":"10.1145\/1378600.1378607"},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Armknecht, F., Gir\u00e3o, J., Matos, A., and Rui, L.A. (2007, January 6\u201312). Who Said That? Privacy at Link Layer. Proceedings of the INFOCOM 2007-IEEE Conference on Computer Communications, Anchorage, AA, USA.","DOI":"10.1109\/INFCOM.2007.313"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Zhang, J., Beresford, A.R., and Sheret, I. (2019, January 19\u201323). SENSORID: Sensor Calibration Fingerprinting for Smartphones. Proceedings of the 40th IEEE Symposium on Security and Privacy (SP), San Francisco, CA, USA.","DOI":"10.1109\/SP.2019.00072"},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Das, A., Borisov, N., and Caesar, M. (2014, January 3\u20137). Do you hear what i hear?: Fingerprinting smart devices through embedded acoustic components. Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, Scottsdale, AZ, USA.","DOI":"10.1145\/2660267.2660325"},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Cheng, Y., Ji, X., Zhang, J., Xu, W., and Chen, Y.C. (2019, January 11\u201315). Demicpu: Device fingerprinting with magnetic signals radiated by cpu. Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, London, UK.","DOI":"10.1145\/3319535.3339810"},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Li, Z., Rathore, A.S., Song, C., Wei, S., Wang, Y., and Xu, W. (2018, January 15\u201319). PrinTracker: Fingerprinting 3D printers using commodity scanners. Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, Toronto, ON, Canada.","DOI":"10.1145\/3243734.3243735"},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Miettinen, M., Marchal, S., Hafeez, I., Asokan, N., Sadeghi, A.R., and Tarkoma, S. (2017, January 5\u20138). IoT Sentinel: Automated device-type identification for security enforcement in IoT. Proceedings of the 2017 IEEE 37th International Conference on Distributed Computing Systems (ICDCS), Atlanta, GA, USA.","DOI":"10.1109\/ICDCS.2017.283"},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Eckersley, P. (2010). How unique is your web browser. International Symposium on Privacy Enhancing Technologies Symposium, Springer.","DOI":"10.1007\/978-3-642-14527-8_1"},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Takei, N., Saito, T., Takasu, K., and Yamada, T. (2015, January 4\u20136). Web browser fingerprinting using only cascading style sheets. Proceedings of the 2015 10th International Conference on Broadband and Wireless Computing, Communication and Applications (BWCCA), Krakow, Poland.","DOI":"10.1109\/BWCCA.2015.105"},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Jiang, T., Wang, H.J., and Hu, Y.C. (2007, January 11\u201313). Preserving location privacy in wireless LANs. Proceedings of the 5th International Conference on Mobile Systems, Applications and Services, San Juan, Puerto Rico.","DOI":"10.1145\/1247660.1247689"},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Fan, Y., Lin, B., Jiang, Y., and Shen, X. (December, January 30). An efficient privacy-preserving scheme for wireless link layer security. Proceedings of the IEEE GLOBECOM 2008-2008 IEEE Global Telecommunications Conference, New Orleans, LO, USA.","DOI":"10.1109\/GLOCOM.2008.ECP.891"},{"key":"ref_23","unstructured":"Laboratory, I.T. (2020, June 17). National Vulnerability Database, Available online: https:\/\/nvd.nist.gov\/."},{"key":"ref_24","unstructured":"Gast, M.S. (2013). 802.11 ac: A Survival Guide: Wi-Fi at Gigabit and Beyond, O\u2019Reilly Media, Inc."},{"key":"ref_25","unstructured":"Eady, F. (2005). Implementing 802.11 with Microcontrollers: Wireless Networking for Embedded Systems Designers, Elsevier."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"56","DOI":"10.1016\/j.pmcj.2013.04.001","article-title":"Linking wireless devices using information contained in Wi-Fi probe requests","volume":"11","author":"Cunche","year":"2014","journal-title":"Pervasive Mob. Comput."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Cunche, M., Kaafar, M.A., and Boreli, R. (2012, January 25\u201328). I know who you will meet this evening! linking wireless devices using wi-fi probe requests. Proceedings of the 2012 IEEE International Symposium on a World of Wireless, Mobile and Multimedia Networks (WoWMoM), San Francisco, CA, USA.","DOI":"10.1109\/WoWMoM.2012.6263700"},{"key":"ref_28","unstructured":"Heaton, J. (2008). Introduction to Neural Networks with Java, Heaton Research, Inc."},{"key":"ref_29","unstructured":"(2020, June 17). Biometrics. Available online: https:\/\/en.wikipedia.org\/wiki\/Biometrics."},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Freudiger, J. (2015, January 22\u201326). How talkative is your mobile device?: An experimental study of Wi-Fi probe requests. Proceedings of the 8th ACM Conference on Security & Privacy in Wireless and Mobile Networks, New York, NY, USA.","DOI":"10.1145\/2766498.2766517"},{"key":"ref_31","first-page":"3","article-title":"ChaCha, a variant of Salsa20","volume":"8","author":"Bernstein","year":"2008","journal-title":"Workshop Rec. SASC"},{"key":"ref_32","unstructured":"IETF (2020, June 17). The Transport Layer Security (TLS) Protocol Version 1.2. Available online: https:\/\/tools.ietf.org\/html\/rfc5246#section-5."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/20\/16\/4620\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T10:02:07Z","timestamp":1760176927000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/20\/16\/4620"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,8,17]]},"references-count":32,"journal-issue":{"issue":"16","published-online":{"date-parts":[[2020,8]]}},"alternative-id":["s20164620"],"URL":"https:\/\/doi.org\/10.3390\/s20164620","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,8,17]]}}}