GPS Spoofing Attacks on Automated Frequency Coordination System in Wi-Fi 6E and Beyond

• URL: http://arxiv.org/abs/2509.02824v2
• Date: Fri, 07 Nov 2025 04:03:51 GMT
• Title: GPS Spoofing Attacks on Automated Frequency Coordination System in Wi-Fi 6E and Beyond
• Abstract summary: Wi-Fi 6E and Wi-Fi 7 overlap with frequencies used by mission-critical incumbent systems.<n>To prevent interference, the FCC mandates the use of Automated Frequency Coordination systems.<n>We show that GPS-based location reporting can be spoofed using inexpensive, off-the-shelf radio equipment.
• Score: 11.565132328207227
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: The 6 GHz spectrum, recently opened for unlicensed use under Wi-Fi 6E and Wi-Fi 7, overlaps with frequencies used by mission-critical incumbent systems such as public safety communications and utility infrastructure. To prevent interference, the FCC mandates the use of Automated Frequency Coordination (AFC) systems, which assign safe frequency and power levels based on Wi-Fi Access Point (AP)-reported locations. In this work, we demonstrate that GPS-based location reporting, which Wi-Fi APs use, can be spoofed using inexpensive, off-the-shelf radio equipment. This enables attackers to manipulate AP behavior, gain unauthorized spectrum access, cause harmful interference, or disable APs entirely by spoofing them into foreign locations. We validate these attacks in a controlled lab setting against a commercial AP and evaluate a commercial AFC system under spoofed scenarios. Our findings highlight critical gaps in the security assumptions of AFC and motivate the need for stronger location integrity protections.

Related papers

• AmbSentry: Mitigating Sensing Eavesdropping in ISAC Systems by Harnessing Ambient IoT Devices [60.083979780396014]
  Integrated sensing and communication (ISAC) has emerged as a pivotal paradigm for 6G networks.<n>This paper proposes AmbSentry, an ISAC system that prevents the leakage of sensing information to sensing eavesdroppers.
  arXiv  Detail & Related papers  (2026-08-12T08:42:05Z)
• Multi-Agent-Driven Cognitive Secure Communications in Satellite-Terrestrial Networks [58.70163955407538]
  Malicious eavesdroppers pose a serious threat to private information via satellite-terrestrial networks (STNs)<n>We propose a cognitive secure communication framework driven by multiple agents that coordinates spectrum scheduling and protection through real-time sensing.<n>We exploit generative adversarial networks to produce adversarial matrices, and employ learning-aided power control to set real and adversarial signal powers for protection layer.
  arXiv  Detail & Related papers  (2026-01-06T10:30:41Z)
• When the Base Station Flies: Rethinking Security for UAV-Based 6G Networks [0.324890820102255]
  6G networks are crucial for achieving seamless global coverage, particularly in underserved and disaster-prone regions.<n>Among platforms, unmanned aerial vehicles (UAVs) are especially promising due to their rapid deployability.<n>This paper identifies several attack surfaces of UAV-BS systems and outlines principles for mitigating their threats.
  arXiv  Detail & Related papers  (2025-12-25T08:37:09Z)
• Stealth and Evasion in Rogue AP Attacks: An Analysis of Modern Detection and Bypass Techniques [0.0]
  This project aimed to design a stealth-capable Rogue AP and evaluate its detectability against Suricata, an open-source NIDS/IPS.<n>Using Wifipumpkin3, the research team successfully deployed a captive portal that harvested user credentials from connected devices.<n>This paper details the construction of the attack, the evasion techniques employed, and the limitations of current NIDS solutions in detecting localized wireless threats.
  arXiv  Detail & Related papers  (2025-12-11T09:45:48Z)
• Flying Drones to Locate Cyber-Attackers in LoRaWAN Metropolitan Networks [0.7926382740035383]
  FOLLOWME project investigates the feasibility of using UAV to locate and even chase attackers during illicit usage of the radio spectrum.<n>The main objective is to develop a cyber-physical security framework that integrates network telemetry with wireless localization.
  arXiv  Detail & Related papers  (2025-09-19T07:56:48Z)
• Buy it Now, Track Me Later: Attacking User Privacy via Wi-Fi AP Online Auctions [8.126374889755468]
  layer-two network identifiers present security vulnerabilities and endanger user privacy.<n>We introduce a new privacy attack against Wi-Fi access points listed on secondhand marketplaces.
  arXiv  Detail & Related papers  (2025-06-16T02:42:14Z)
• Securing Wi-Fi 6 Connection Establishment Against Relay and Spoofing Threats [8.770626974296949]
  Current Wi-Fi security protocols fail to fully mitigate attacks like man-in-the-middle, preamble spoofing, and relaying.<n>We design a backward-compatible scheme using a digital signature interwoven into the preambles at the physical (PHY) layer with time constraints.<n>We show that our relay attack detection achieves 96-100% true positive rates.
  arXiv  Detail & Related papers  (2025-01-02T19:49:24Z)
• Obfuscated Location Disclosure for Remote ID Enabled Drones [57.66235862432006]
  We propose Obfuscated Location disclOsure for RID-enabled drones (OLO-RID) Instead of disclosing the actual drone's location, drones equipped with OLO-RID disclose a differentially private obfuscated location in a mobile scenario. OLO-RID also extends RID messages with encrypted location information, accessible only by authorized entities.
  arXiv  Detail & Related papers  (2024-07-19T12:35:49Z)
• Surveilling the Masses with Wi-Fi-Based Positioning Systems [7.1251088452879285]
  We show that Apple's WPS can be abused to create a privacy threat on a global scale. We present an attack that allows an unprivileged attacker to amass a worldwide snapshot of Wi-Fi BSSID geolocations. We present several case studies that demonstrate the types of attacks on privacy that Apple's WPS enables.
  arXiv  Detail & Related papers  (2024-05-23T18:22:12Z)
• Spatial-Domain Wireless Jamming with Reconfigurable Intelligent Surfaces [20.406776153173176]
  We propose a novel approach that allows for environment-adaptive spatial control of wireless jamming signals.<n>We demonstrate complete denial-of-service of a Wi-Fi device while a second device located at a distance as close as 5 mm remains unaffected.
  arXiv  Detail & Related papers  (2024-02-21T12:50:44Z)
• Tamper-Evident Pairing [55.2480439325792]
  Tamper-Evident Pairing (TEP) is an improvement of the Push-Button configuration (PBC) standard. TEP relies on the Tamper-Evident Announcement (TEA), which guarantees that an adversary can neither tamper a transmitted message without being detected, nor hide the fact that the message has been sent. This paper provides a comprehensive overview of the TEP protocol, including all information needed to understand how it works.
  arXiv  Detail & Related papers  (2023-11-24T18:54:00Z)
• GraSens: A Gabor Residual Anti-aliasing Sensing Framework for Action Recognition using WiFi [52.530330427538885]
  WiFi-based human action recognition (HAR) has been regarded as a promising solution in applications such as smart living and remote monitoring. We propose an end-to-end Gabor residual anti-aliasing sensing network (GraSens) to directly recognize the actions using the WiFi signals from the wireless devices in diverse scenarios.
  arXiv  Detail & Related papers  (2022-05-24T10:20:16Z)
• UAV-aided RF Mapping for Sensing and Connectivity in Wireless Networks [52.14281905671453]
  The use of unmanned aerial vehicles (UAV) as flying radio access network (RAN) nodes offers a promising complement to traditional fixed terrestrial deployments. Radio mapping is one of the challenges related to this task, referred here as radio mapping. The advantages induced by radio-mapping in terms of connectivity, sensing, and localization performance are illustrated.
  arXiv  Detail & Related papers  (2022-05-06T16:16:08Z)
• A Comprehensive Overview on 5G-and-Beyond Networks with UAVs: From Communications to Sensing and Intelligence [152.89360859658296]
  5G networks need to support three typical usage scenarios, namely, enhanced mobile broadband (eMBB), ultra-reliable low-latency communications (URLLC) and massive machine-type communications (mMTC) On the one hand, UAVs can be leveraged as cost-effective aerial platforms to provide ground users with enhanced communication services by exploiting their high cruising altitude and controllable maneuverability in 3D space. On the other hand, providing such communication services simultaneously for both UAV and ground users poses new challenges due to the need for ubiquitous 3D signal coverage as well as the strong air-ground network interference.
  arXiv  Detail & Related papers  (2020-10-19T08:56:04Z)
• Mind the GAP: Security & Privacy Risks of Contact Tracing Apps [75.7995398006171]
  Google and Apple have jointly provided an API for exposure notification in order to implement decentralized contract tracing apps using Bluetooth Low Energy. We demonstrate that in real-world scenarios the GAP design is vulnerable to (i) profiling and possibly de-anonymizing persons, and (ii) relay-based wormhole attacks that basically can generate fake contacts.
  arXiv  Detail & Related papers  (2020-06-10T16:05:05Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.