{"id":"https://openalex.org/W4385080273","doi":"https://doi.org/10.1109/sp46215.2023.10179441","title":"Man-in-the-Middle Attacks without Rogue AP: When WPAs Meet ICMP Redirects","display_name":"Man-in-the-Middle Attacks without Rogue AP: When WPAs Meet ICMP Redirects","publication_year":2023,"publication_date":"2023-05-01","ids":{"openalex":"https://openalex.org/W4385080273","doi":"https://doi.org/10.1109/sp46215.2023.10179441"},"language":"en","primary_location":{"id":"doi:10.1109/sp46215.2023.10179441","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179441","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101743396","display_name":"Xuewei Feng","orcid":"https://orcid.org/0000-0003-3736-6623"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xuewei Feng","raw_affiliation_strings":["Tsinghua University,Department of Computer Science and Technology & BNRist"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Department of Computer Science and Technology & BNRist","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108050283","display_name":"Qi Li","orcid":"https://orcid.org/0000-0002-0060-3376"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qi Li","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace & BNRist, Tsinghua University","Zhongguancun Lab"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace & BNRist, Tsinghua University","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Zhongguancun Lab","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026728546","display_name":"Kun Sun","orcid":"https://orcid.org/0000-0003-4152-2107"},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kun Sun","raw_affiliation_strings":["George Mason University,Department of Information Sciences and Technology & CSIS"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"George Mason University,Department of Information Sciences and Technology & CSIS","institution_ids":["https://openalex.org/I162714631"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016817843","display_name":"Yuxiang Yang","orcid":"https://orcid.org/0000-0002-1837-3628"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuxiang Yang","raw_affiliation_strings":["Tsinghua University,Department of Computer Science and Technology & BNRist"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Department of Computer Science and Technology & BNRist","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100665814","display_name":"Ke Xu","orcid":"https://orcid.org/0000-0003-2587-8517"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ke Xu","raw_affiliation_strings":["Tsinghua University,Department of Computer Science and Technology & BNRist","Zhongguancun Lab"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Department of Computer Science and Technology & BNRist","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Zhongguancun Lab","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":7.9613,"has_fulltext":false,"cited_by_count":22,"citation_normalized_percentile":{"value":0.98691713,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"3162","last_page":"3177"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11158","display_name":"Wireless Networks and Protocols","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11158","display_name":"Wireless Networks and Protocols","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10651","display_name":"IPv6, Mobility, Handover, Networks, Security","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/internet-control-message-protocol","display_name":"Internet Control Message Protocol","score":0.8993098735809326},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7269065380096436},{"id":"https://openalex.org/keywords/man-in-the-middle-attack","display_name":"Man-in-the-middle attack","score":0.6769626140594482},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6695247888565063},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5596336722373962},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.4435611069202423},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.44285956025123596},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.29323822259902954},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.15770861506462097},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.14405590295791626},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.13175147771835327}],"concepts":[{"id":"https://openalex.org/C195219913","wikidata":"https://www.wikidata.org/wiki/Q13162","display_name":"Internet Control Message Protocol","level":3,"score":0.8993098735809326},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7269065380096436},{"id":"https://openalex.org/C196491621","wikidata":"https://www.wikidata.org/wiki/Q554830","display_name":"Man-in-the-middle attack","level":3,"score":0.6769626140594482},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6695247888565063},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5596336722373962},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.4435611069202423},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.44285956025123596},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.29323822259902954},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.15770861506462097},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.14405590295791626},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.13175147771835327}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/sp46215.2023.10179441","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179441","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.8299999833106995}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320334953","display_name":"China National Funds for Distinguished Young Scientists","ror":"https://ror.org/01pab2602"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":58,"referenced_works":["https://openalex.org/W811491742","https://openalex.org/W1538104277","https://openalex.org/W1556597491","https://openalex.org/W1590810061","https://openalex.org/W1615970822","https://openalex.org/W1664342854","https://openalex.org/W1692207811","https://openalex.org/W2051074457","https://openalex.org/W2071285671","https://openalex.org/W2072730946","https://openalex.org/W2080959859","https://openalex.org/W2118715238","https://openalex.org/W2139985879","https://openalex.org/W2150562017","https://openalex.org/W2155750235","https://openalex.org/W2159256070","https://openalex.org/W2162260997","https://openalex.org/W2171861685","https://openalex.org/W2245788666","https://openalex.org/W2256571066","https://openalex.org/W2297894457","https://openalex.org/W2362484477","https://openalex.org/W2407248964","https://openalex.org/W2525730961","https://openalex.org/W2741138347","https://openalex.org/W2767098552","https://openalex.org/W2790127834","https://openalex.org/W2806656048","https://openalex.org/W2889555490","https://openalex.org/W2892310063","https://openalex.org/W2904172073","https://openalex.org/W2912797383","https://openalex.org/W2946877613","https://openalex.org/W2963283811","https://openalex.org/W2963936748","https://openalex.org/W3016124431","https://openalex.org/W3082884087","https://openalex.org/W3091858468","https://openalex.org/W3096245080","https://openalex.org/W3099114729","https://openalex.org/W3106422718","https://openalex.org/W3142381527","https://openalex.org/W3204548492","https://openalex.org/W3212980631","https://openalex.org/W4210790101","https://openalex.org/W4237677199","https://openalex.org/W4243835522","https://openalex.org/W4300747978","https://openalex.org/W6605692415","https://openalex.org/W6622874782","https://openalex.org/W6638652362","https://openalex.org/W6640239109","https://openalex.org/W6707175577","https://openalex.org/W6712259822","https://openalex.org/W6713902973","https://openalex.org/W6720824080","https://openalex.org/W6754539895","https://openalex.org/W6794082451"],"related_works":["https://openalex.org/W2376613537","https://openalex.org/W3076649823","https://openalex.org/W4387007028","https://openalex.org/W2969677719","https://openalex.org/W4312258000","https://openalex.org/W2278600692","https://openalex.org/W3177384695","https://openalex.org/W2886398423","https://openalex.org/W2363721540","https://openalex.org/W4226267504"],"abstract_inverted_index":{"Modern":[0],"Wi-Fi":[1,76,268,273,288],"networks":[2,77,289],"are":[3,290],"commonly":[4],"protected":[5],"by":[6,78,136],"the":[7,28,53,72,80,101,104,118,130,149,152,161,181,191,202,222,239,246,250,284,297,300,304,313],"security":[8,73,133,274],"mechanisms,":[9],"e.g.,":[10],"WPA,":[11],"WPA2":[12],"or":[13],"WPA3,":[14],"and":[15,94,125,166,215,253,303],"thus":[16,95],"it":[17],"is":[18,115],"difficult":[19],"for":[20],"an":[21,157,261],"attacker":[22,150],"(a":[23],"malicious":[24],"supplicant)":[25],"to":[26,51,83,90,98,116,142,155,228,237,292,299,311],"hijack":[27,52,100],"traffic":[29,56,102],"of":[30,120,180,217,249,283],"other":[31],"supplicants":[32],"as":[33],"a":[34,45,65,85,91,176,234],"man-in-the-middle":[35],"(MITM).":[36],"In":[37,60],"traditional":[38],"Evil":[39],"Twins":[40],"attacks,":[41],"attackers":[42,97],"may":[43],"deploy":[44],"bogus":[46,110],"wireless":[47,208],"access":[48],"point":[49],"(AP)":[50],"victim":[54,92,105,251],"supplicants\u2019":[55],"(e.g.,":[57],"stealing":[58],"credentials).":[59],"this":[61,229],"paper,":[62],"we":[63,232,307],"uncover":[64,175],"new":[66,177,235],"MITM":[67],"attack":[68],"that":[69,189,280],"can":[70,220,244],"evade":[71,245],"mechanisms":[74,134],"in":[75,186],"spoofing":[79],"legitimate":[81,153,162],"AP":[82,154,163,187,192,213,305],"send":[84],"forged":[86,170,223,240],"ICMP":[87,126,158,171,197,224,241],"redirect":[88,159,172,225,242],"message":[89,243],"supplicant":[93,106,252],"allow":[96],"stealthily":[99],"from":[103,194,210],"without":[107],"deploying":[108],"any":[109],"AP.":[111],"The":[112,276],"core":[113],"idea":[114],"misuse":[117],"vulnerability":[119,178,298],"cross-layer":[121],"interactions":[122],"between":[123],"WPAs":[124],"protocols,":[127],"totally":[128],"evading":[129],"link":[131],"layer":[132],"enforced":[135],"WPAs.":[137],"We":[138,174,204,259],"resolve":[139],"two":[140,309],"requirements":[141],"successfully":[143],"launch":[144],"our":[145,293],"attack.":[146,294,315],"First,":[147],"when":[148],"spoofs":[151],"craft":[156],"message,":[160],"cannot":[164],"recognize":[165],"filter":[167],"out":[168,282],"those":[169],"messages.":[173],"(CVE-2022-25667)":[179],"Network":[182],"Processing":[183],"Units":[184],"(NPUs)":[185],"routers":[188,193,209,219],"restrict":[190],"blocking":[195],"fake":[196],"error":[198],"messages":[199,226],"passing":[200],"through":[201],"router.":[203],"test":[205],"55":[206],"popular":[207],"10":[211],"well-known":[212],"vendors,":[214,306],"none":[216],"these":[218],"block":[221],"due":[227],"vulnerability.":[230],"Second,":[231],"develop":[233,308],"method":[236],"ensure":[238],"legitimacy":[247],"check":[248],"then":[254],"poison":[255],"its":[256],"routing":[257],"table.":[258],"conduct":[260],"extensive":[262],"measurement":[263],"study":[264],"on":[265],"122":[266,285],"real-world":[267],"networks,":[269],"covering":[270],"all":[271],"prevalent":[272],"modes.":[275],"experimental":[277],"results":[278],"show":[279],"109":[281],"(89%)":[286],"evaluated":[287],"vulnerable":[291],"Besides":[295],"notifying":[296],"NPU":[301],"manufacturers":[302],"countermeasures":[310],"throttle":[312],"identified":[314]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":11},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":1}],"updated_date":"2026-08-04T08:18:43.703281","created_date":"2025-10-10T00:00:00"}