MitM attack: CCMP data-confidentiality targeting Wi-Fi

Zhaoyang Wang; Quan Gan; Hong Wen; Wenjing Hou; Huanhuan Song; Wenxin Lei

doi:10.1117/12.3009296

11 October 2023 MitM attack: CCMP data-confidentiality targeting Wi-Fi

Zhaoyang Wang, Quan Gan, Hong Wen, Wenjing Hou, Huanhuan Song, Wenxin Lei

Proceedings Volume 12918, Fourth International Conference on Computer Science and Communication Technology (ICCSCT 2023); 129180W (2023) https://doi.org/10.1117/12.3009296
Event: International Conference on Computer Science and Communication Technology (ICCSCT 2023), 2023, Wuhan, China

Abstract

Wi-Fi is a widely used wireless local area network (WLAN) technology, and its security issues have always been a matter of concern. The counter with CBC-MAC protocol (CCMP) is a commonly employed security protocol for Wi-Fi. However, vulnerabilities in the 4-way handshake process can allow attackers to carry out man-in-the-middle (MitM) attacks. In a successful attack, the targeted station (STA) connects to a rogue access point (AP) established by the MitM, which can have severe consequences for Wi-Fi users. This paper focuses on MitM attacks in the context of WPA2, CCMP, and WLAN security. We analyze and implement a MitM attack scenario, and based on this scenario, we summarize the potential hazards resulting from a successful attack. Furthermore, we present solutions to help prevent falling victim to such attacks.

(2023) Published by SPIE. Downloading of the abstract is permitted for personal use only.

Citation Download Citation

Zhaoyang Wang, Quan Gan, Hong Wen, Wenjing Hou, Huanhuan Song, and Wenxin Lei "MitM attack: CCMP data-confidentiality targeting Wi-Fi", Proc. SPIE 12918, Fourth International Conference on Computer Science and Communication Technology (ICCSCT 2023), 129180W (11 October 2023); https://doi.org/10.1117/12.3009296

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available