Fingerprinting IoT Devices Using Latent Physical Side-Channels
Abstract
The proliferation of low-end low-power internet-of-things (IoT) devices in "smart" environments necessitates secure identification and authentication of these devices via low-overhead fingerprinting methods. Previous work typically utilizes characteristics of the device's wireless modulation (WiFi, BLE, etc.) in the spectrum, or more recently, electromagnetic emanations from the device's DRAM to perform fingerprinting. The problem is that many devices, especially low-end IoT/embedded systems, may not have transmitter modules, DRAM, or other complex components, therefore making fingerprinting infeasible or challenging. To address this concern, we utilize electromagnetic emanations derived from the processor's clock to fingerprint. We present Digitus, an emanations-based fingerprinting system that can authenticate IoT devices at range. The advantage of Digitus is that we can authenticate low-power IoT devices using features intrinsic to their normal operation without the need for additional transmitters and/or other complex components such as DRAM. Our experiments demonstrate that we achieve ≥ 95% accuracy on average, applicability in a wide range of IoT scenarios (range ≥ 5m, non-line-of-sight, etc.), as well as support for IoT applications such as finding hidden devices. Digitus represents a low-overhead solution for the authentication of low-end IoT devices.
Document Details
- Document Type
- Pub Defense Publication
- Publication Date
- Jun 12, 2023
- Source ID
- 10.1145/3596247
Entities
People
- Danijela Čabrić
- Dominic Konrad
- Justin Feng
- Nader Sehatbakhsh
- Shamik Sarkar
- Tianyi Zhao
- Timothy Jacques
Organizations
- Intelligence Advanced Research Projects Activity
- National Science Foundation
- University of California, Los Angeles