Title
Wrong Siren! A Location Spoofing Attack on Indoor Positioning Systems: The Starbucks Case Study.
Abstract
The Internet of Things interconnects a mass of billions devices, from smartphones to cars, to provide convenient services to people. This gives immediate access to various data about the objects and the environmental context -- leading to smart services and increased efficiency. A number of retail stores have started to adopt IoT enabled services to attract customers. In particular, thanks to indoor proximity technologies, it is possible to introduce location-based smart services to customers, for example, transmitting identifiable signals that represent the locations of stores. In this article, we investigate a potential security risk involved in such technologies: physical signals used as identifiers can be captured and forged easily with today's widely available IoT software for implementing location spoofing attacks. We highlight this security risk by providing a case study: an in-depth security analysis of the recently launched Starbucks service called Siren Order.
Year
DOI
Venue
2017
10.1109/MCOM.2017.1600595CM
IEEE Communications Magazine
Keywords
Field
DocType
Internet of Things,Smart phones,Device-to-device communication,Network security
Telecommunications,Spoofing attack,Identifier,Computer security,Computer science,Network security,Internet of Things,Computer network,Security analysis,Software,Siren (mythology)
Journal
Volume
Issue
ISSN
55
3
0163-6804
Citations 
PageRank 
References 
2
0.38
6
Authors
6
Name
Order
Citations
PageRank
junsung cho1223.03
Jaegwan Yu271.56
Sanghak Oh350.89
Jungwoo Ryoo411819.99
Jaeseung Song514627.62
Hyoungshick Kim622632.27