Near Real-Time RF-DNA Fingerprinting for ZigBee Devices Using Software Defined Radios
Abstract
Low-Rate Wireless Personal Area Network(s) (LR-WPAN) usage has increased as more consumers embrace Internet of Things (IoT) devices. ZigBee Physical Layer (PHY) is based on the Institute of Electrical and Electronics Engineers (IEEE) 802.15.4 specification designed to provide a low-cost, low-power, and low-complexity solution for Wireless Sensor Network(s) (WSN). The standards extended battery life and reliability makes ZigBee WSN a popular choice for home automation, transportation, traffic management, Industrial Control Systems (ICS), and cyber-physical systems. As robust and versatile as the standard is, ZigBee remains vulnerable to a myriad of common network attacks. Previous research involving Radio Frequency-Distinct Native Attribute (RF-DNA) Fingerprinting and device discrimination has shown that bit-level WSN security can be augmented with PHY-based features. The objective of this research was to develop and implement an Radio Frequency (RF) air monitor system that classifies devices in Near Real-Time (NRT). The performance of the NRT air monitor is contrasted against previous research that utilized MATLAB-based Fingerprinting post-processing RF-DNA. The RF air monitor demonstration included collection of IEEE 802.15.4 bursts from Nd = 10 RZUSBsticks to assess NRT performance and effectiveness. The first set of experiments examined how well the air monitor recovered IEEE 802.15.4 data packets while fingerprinting and discriminating ZigBee devices under two distinct workloads. The second set of experiments compared predictive post-processed MATLAB RF-DNA Multiple Discriminant Analysis/Maximum Likelihood (MDA/ML) models Average Percent Correct Classification ( C ) against the air monitors observed operational C for each RZUSBstick. The air monitor achieved an Overall Acurate Packet Reconstruction Percent ( R) x15; 97.92 while correctly fingerprinting an Overall Fingerprinted Percent ( F ) x15; 97.48 of the transmitted IEEE 802.15.4 data packets during the trial
Document Details
- Document Type
- Technical Report
- Publication Date
- Mar 21, 2019
- Accession Number
- AD1074902
Entities
People
- Frankie A Cruz
Organizations
- Air Force Institute of Technology