A Signal Injection Attack Against Zero Involvement Pairing and Authentication for the Internet of Things

arXiv:2403.14018v1 Announce Type: new
Abstract: Zero Involvement Pairing and Authentication (ZIPA) is a promising technique for autoprovisioning large networks of Internet-of-Things (IoT) devices. In this work, we present the first successful signal injection attack on a ZIPA system. Most existing ZIPA systems assume there is a negligible amount of influence from the unsecured outside space on the secured inside space. In reality, environmental signals do leak from adjacent unsecured spaces and influence the environment of the secured space. Our attack …

arxiv attack authentication cs.cr devices injection injection attack internet internet of things iot large networks signal system systems things work