May the force be with you : Force-based relay attack detection

Research output: Chapters, Conference Papers, Creative and Literary WorksRGC 32 - Refereed conference paper (with host publication)peer-review

2 Scopus Citations
View graph of relations

Author(s)

Related Research Unit(s)

Detail(s)

Original languageEnglish
Title of host publicationSmart Card Research and Advanced Applications
Subtitle of host publication16th International Conference, CARDIS 2017 Lugano, Switzerland, November 13–15, 2017, Revised Selected Papers
EditorsThomas Eisenbarth, Yannick Teglia
PublisherSpringer International Publishing AG
Pages142-159
ISBN (Electronic)9783319752082
ISBN (Print)9783319752075
Publication statusPublished - 2018

Publication series

NameLecture Notes in Computer Science
Volume10728
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Conference

Title16th International Conference on Smart Card Research and Advanced Applications, CARDIS 2017
PlaceSwitzerland
CityLugano
Period13 - 15 November 2017

Abstract

Relay attacks pose a significant threat against communicating devices that are required to operate within a short-distance from each other and a restricted time frame. In the field of smart cards, distance bounding protocols have been proposed as an effective countermeasure, whereas, in the field of smartphones, many proposals suggest the use of (natural) ambient sensing as an effective alternative. However, empirical evaluation of the proposals carried out in existing literature has reported negative results in using natural ambient sensing in distance- and time-restricted scenarios, like EMV contactless payments that require the proximity to be less than 3 cm and the transaction duration to be under 500 ms. In this paper, we propose a novel approach for Proximity and Relay Attack Detection (PRAD), using bidirectional sensing and comparing button presses and releases behaviour (duration of press and gap between presses and releases), performed by a genuine user during the transaction. We implemented a test-bed environment to collect training and analysis data from a set of users, for both the genuine and attacker-involved transactions. Analysis of the collection-data indicates a high effectiveness of the proposed solution, as it was successful in distinguishing between proximity and relay-attack transactions, using thresholds set after analysis of genuine training transaction data. Furthermore, perfect classification of genuine and relay-attack transactions was achieved by using well-known machine learning classifiers.

Research Area(s)

  • Contactless, Experimental analysis, Mobile payments, Relay attacks

Citation Format(s)

May the force be with you: Force-based relay attack detection. / Gurulian, Iakovos; Hancke, Gerhard P.; Markantonakis, Konstantinos et al.
Smart Card Research and Advanced Applications: 16th International Conference, CARDIS 2017 Lugano, Switzerland, November 13–15, 2017, Revised Selected Papers. ed. / Thomas Eisenbarth; Yannick Teglia. Springer International Publishing AG, 2018. p. 142-159 (Lecture Notes in Computer Science; Vol. 10728).

Research output: Chapters, Conference Papers, Creative and Literary WorksRGC 32 - Refereed conference paper (with host publication)peer-review