Black Hat Europe资料eu-15-Kang-Is-Your-Timespace-Safe-Time-And-Position-Spoofing-Opensourcely-wp.pdfVIP

Time and Position Spoofing with Open Source Projects Kang Wang Shuhua Chen Aimin Pan Mobile Security of Alibaba Group Mobile Security of Alibaba Group Mobile Security of Alibaba Group wangkang.wk@ xingzhong@ aimin.pan@ Abstract—Time and position data of mobile devices are trusted finally shows some examples of GPS spoofing results. Section without checking by most vendors and developers. We discover a III introduces WiFi based location spoofing principle, then method of GPS spoofing with low-cost SDR devices. The method gives the detailed method of this spoofing, and finally shows can be used to alter the location status as well as the time of affected devices, which poses a security threat to location-based a few examples. Section IV gives some advices on how to services. We also examine other positioning methods used by prevent such spoofing. smart devices (e.g. WiFi) and how to spoof them. Advices on preventing such spoofing are given. II. GPS SPOOFING A. GPS Overview I. INTRODUCTION GPS is widely used for positioning and time syncronization Satellites 2 for mobile devices. However, since time and position data (x2 , y2 , z2)