Blight the power: Jamming attack cripples wireless signals using clever reflective technology
(2020/06/01)
- Reference: 1591043827
- News link: https://www.theregister.co.uk/2020/06/01/irs_wireless_jamming/
- Source link:
Wireless networking researchers have proposed a way to jam wireless signals without power.
In [1]a paper distributed through ArXiv, a group of boffins from universities in Australia, China, Singapore, and South Korea describe a technique that uses intelligent reflecting surface (IRS) technology, an emerging wireless signal optimization scheme, to interfere with signals instead of enhancing them.
IRS is related to software-defined radio, using software to control how materials redirect radio-frequency (RF) signals. Just as acoustical engineering is used to improve sound reflections in movie theaters and concert halls, IRS aims to improve RF signal behavior in various environments, but via software-controlled surfaces rather than fixed architectural elements.
An IRS-enabled element like a wall would include a controller that communicates with tunable chips that can programmatically alter the signal-scattering characteristics of the surface to target signals. It differs from amplify-and-forward signal relay because it relies on passive techniques to control beam steering, without a power component and active circuits that handle re-transmission.
Turning the good into bad
The attack described can jam a wireless communications system by changing how signals reflect and can do so without leaving an energy footprint, the researchers explain, making it difficult to detect and prevent.
"The reason is that in our proposed scheme, the magnitudes of reflectioncoefficients and phase shifts of all passive reflecting elements can be carefully designed such that the total received signals at the legitimate receiver from the direct and reflecting links can be added destructively, which can significantly reduce the received power and thus diminish the SINR at the LR," the radio boffins state.
In simulated results, they show that their proposed IRS-based jammer can reduce signal power by up to 99 per cent, and in some scenarios outperforms conventional active signal jamming.
Don't panic, yet
In an email to The Register , Sergi Abadal, director of research for N3Cat at [2]VISORSURF and a postdoctoral researcher at Universitat Politècnica de Catalunya (UPC), said, "Research in IRS has been exploding lately, with lots of proposals. Most of them are theoretical and simulation-based, with a few experimental prototypes as notable exceptions."
Having looked briefly at the paper, he stressed that it's theoretical and the results need to be taken with caution until there's experimental validation. But he allowed that the technique described seems plausible.
"Many works have proposed using IRS to help with wireless communications (increasing coverage, signal strength, reducing interference, and so on)," said Abadal. "In general, the way of increasing the signal strength is to make all the reflections to reach the receiver in a way that can be 'coherently combined' (their phases are aligned and their power adds up)."
Forget cyber crims, it's time to start worrying about GPS jammers – UK.gov report [3]READ MORE
"Therefore, theoretically, nothing prevents you from using similar techniques to make the reflections reach the receiver in a way that are 'destructively combined' (their phases are opposite and they interfere with each other)," he explained.
To interfere with signals in this manner, Abadal said you'd need to know the position of the transmitter and the intended receiver, which could be obtained by interacting with an access point or base station – which might be difficult if done illegitimately – or by inferring the positions from signals captured in the environment.
This technique, if developed into something more than a theoretical attack, should be applicable against current wireless systems.
"If the conditions are right – the IRS exists and is capable of inferring the position of the transmitter and of the receiver it wants to jam – then it could be possible in current wireless systems," Abadal said.
The paper, IRS-based Wireless Jamming Attacks: When Jammers can Attack without Power, is co-authored by Bin Lyu, Dinh Thai Hoang, Shimin Gong, Dusit Niyato, and Dong In Kim. ®
[1] https://arxiv.org/abs/2001.01887
[2] https://www.n3cat.upc.edu/projects/visorsurf
[3] https://www.theregister.com/2018/01/31/gps_signal_jammers_critical_infrastructure/
In [1]a paper distributed through ArXiv, a group of boffins from universities in Australia, China, Singapore, and South Korea describe a technique that uses intelligent reflecting surface (IRS) technology, an emerging wireless signal optimization scheme, to interfere with signals instead of enhancing them.
IRS is related to software-defined radio, using software to control how materials redirect radio-frequency (RF) signals. Just as acoustical engineering is used to improve sound reflections in movie theaters and concert halls, IRS aims to improve RF signal behavior in various environments, but via software-controlled surfaces rather than fixed architectural elements.
An IRS-enabled element like a wall would include a controller that communicates with tunable chips that can programmatically alter the signal-scattering characteristics of the surface to target signals. It differs from amplify-and-forward signal relay because it relies on passive techniques to control beam steering, without a power component and active circuits that handle re-transmission.
Turning the good into bad
The attack described can jam a wireless communications system by changing how signals reflect and can do so without leaving an energy footprint, the researchers explain, making it difficult to detect and prevent.
"The reason is that in our proposed scheme, the magnitudes of reflectioncoefficients and phase shifts of all passive reflecting elements can be carefully designed such that the total received signals at the legitimate receiver from the direct and reflecting links can be added destructively, which can significantly reduce the received power and thus diminish the SINR at the LR," the radio boffins state.
In simulated results, they show that their proposed IRS-based jammer can reduce signal power by up to 99 per cent, and in some scenarios outperforms conventional active signal jamming.
Don't panic, yet
In an email to The Register , Sergi Abadal, director of research for N3Cat at [2]VISORSURF and a postdoctoral researcher at Universitat Politècnica de Catalunya (UPC), said, "Research in IRS has been exploding lately, with lots of proposals. Most of them are theoretical and simulation-based, with a few experimental prototypes as notable exceptions."
Having looked briefly at the paper, he stressed that it's theoretical and the results need to be taken with caution until there's experimental validation. But he allowed that the technique described seems plausible.
"Many works have proposed using IRS to help with wireless communications (increasing coverage, signal strength, reducing interference, and so on)," said Abadal. "In general, the way of increasing the signal strength is to make all the reflections to reach the receiver in a way that can be 'coherently combined' (their phases are aligned and their power adds up)."
Forget cyber crims, it's time to start worrying about GPS jammers – UK.gov report [3]READ MORE
"Therefore, theoretically, nothing prevents you from using similar techniques to make the reflections reach the receiver in a way that are 'destructively combined' (their phases are opposite and they interfere with each other)," he explained.
To interfere with signals in this manner, Abadal said you'd need to know the position of the transmitter and the intended receiver, which could be obtained by interacting with an access point or base station – which might be difficult if done illegitimately – or by inferring the positions from signals captured in the environment.
This technique, if developed into something more than a theoretical attack, should be applicable against current wireless systems.
"If the conditions are right – the IRS exists and is capable of inferring the position of the transmitter and of the receiver it wants to jam – then it could be possible in current wireless systems," Abadal said.
The paper, IRS-based Wireless Jamming Attacks: When Jammers can Attack without Power, is co-authored by Bin Lyu, Dinh Thai Hoang, Shimin Gong, Dusit Niyato, and Dong In Kim. ®
[1] https://arxiv.org/abs/2001.01887
[2] https://www.n3cat.upc.edu/projects/visorsurf
[3] https://www.theregister.com/2018/01/31/gps_signal_jammers_critical_infrastructure/
Version 1.0
I think is "passive" in the same way that a tick works, simply absorbing specific RF without radiating in a way that can be detected - sure a tick leaves a little hole but mostly you don't notice it at the instant that it bites, you just suffer afterwards. So you could have a situation where one manufacturers phone works but everyone else nearby has crappy reception.
But maybe this is an opportunity to make an "RF eliminator" to sell to people who think that they are [1]RF sensitive .
[1] https://www.youtube.com/watch?v=gLW7ceZMchk
Chris G
There is definitely a market there for 5G/Covid19/mind control free wallpaper and curtains, the RF sensitive would love a chance to get the tin foil off their heads.
By the way, is that where half baked ideas come from?
But passive is more infuriating
Kevin McMurtrie
Anyone tried using an antenna next to a cluster of tall offices? Got it! Wait, it's fading.. just need a little adjustment.. no, yes, no, gah!
Unless I am missing something, this is not passive as it depends on software interacting with surfaces that can react to relevant instructions from the software.
That also means the idea can't just jam any old signal as the reflective surfaces will need to have locations 'between' the source and end point as well as the necessary properties to respond to the software.