Off-Path TCP Hijacking in Wi-Fi Networks: A Packet-Size Side Channel Attack

arXiv:2402.12716v1 Announce Type: cross
Abstract: In this paper, we unveil a fundamental side channel in Wi-Fi networks, specifically the observable frame size, which can be exploited by attackers to conduct TCP hijacking attacks. Despite the various security mechanisms (e.g., WEP and WPA2/WPA3) implemented to safeguard Wi-Fi networks, our study reveals that an off path attacker can still extract sufficient information from the frame size side channel to hijack the victim's TCP connection. Our side channel attack is based on two …

arxiv attack attackers attacks can channel cs.cr cs.ni exploited hijacking networks observable packet path safeguard security size study tcp wep wi-fi wi-fi networks wpa2 wpa3