Secure Wi-Fi Ranging Today: Security and Adoption of IEEE 802.11az/bk

• URL: http://arxiv.org/abs/2603.18687v1
• Date: Thu, 19 Mar 2026 09:46:43 GMT
• Title: Secure Wi-Fi Ranging Today: Security and Adoption of IEEE 802.11az/bk
• Abstract summary: We analyse the core mechanisms of secure Wi-Fi ranging as defined in IEEE 802.11az and IEEE 802.11bk.<n>We show how common deployment choices can result in unauthenticated ranging, downgrade attacks, and simple denial-of-service attacks.<n>Our results show that secure Wi-Fi ranging is highly sensitive to configuration choices and is non-trivial to implement on existing hardware.
• Score: 5.178641558831555
• License: http://creativecommons.org/licenses/by-sa/4.0/
• Abstract: Ranging and localisation have become critical for many applications and services. The Wi-Fi (IEEE 802.11) standard is a natural candidate for providing these functions across diverse environments, given its widespread deployment. The IEEE 802.11az amendment, finalised in 2023, introduces "Next Generation Positioning" mechanisms to secure and harden the existing insecure Wi-Fi Fine Timing Measurement (FTM) ranging solution. Moreover, the recent IEEE 802.11bk amendment increases the available bandwidth with the goal of approaching the centimetre-level ranging accuracy of ultra-wideband (UWB) systems. This paper examines to what extent these promises hold from a security and deployability perspective. We analyse the core mechanisms of secure Wi-Fi ranging as defined in IEEE 802.11az and IEEE 802.11bk at both the logical and physical layers, combining standards analysis with simulations and measurements on commercial and development hardware. At the logical layer, we show how common deployment choices can result in unauthenticated ranging, downgrade attacks, and simple denial-of-service attacks, making it difficult to securely realise many high-stakes use cases. At the physical layer, we study the predictability of secure ranging waveforms, the security impact of symbol repetition, and how waveform design choices affect compliance with spectral masks under realistic RF behaviour. Our results show that secure Wi-Fi ranging is highly sensitive to configuration choices and is non-trivial to implement on existing hardware. This is also evidenced by the currently limited support for secure Wi-Fi ranging in commodity devices. This paper provides practical guidelines for using secure FTM safely and recommendations to vendors and standardisation bodies to improve its robustness and deployability.

Related papers

• AmbSentry: Mitigating Sensing Eavesdropping in ISAC Systems by Harnessing Ambient IoT Devices [60.083979780396014]
  Integrated sensing and communication (ISAC) has emerged as a pivotal paradigm for 6G networks.<n>This paper proposes AmbSentry, an ISAC system that prevents the leakage of sensing information to sensing eavesdroppers.
  arXiv  Detail & Related papers  (2026-08-12T08:42:05Z)
• Physical-AI: From Channel Awareness to Environmental Intelligence in 6G Wireless Networks [100.92510794177822]
  Conventional wireless networks rely on instantaneous channel state information (CSI) and react to channel variations without explicitly modeling the physical environment.<n>We propose Physical-AI: a new architecture for environment-aware wireless networking, where radio signals enable sensing, modeling, and interaction with the environment.<n>We show that the proposed framework reduces outage probability and blockage-response latency, particularly under increasing beam-switching delays.
  arXiv  Detail & Related papers  (2026-05-12T09:02:20Z)
• From Conceptual Scaffold to Prototype: A Standardized Zonal Architecture for Wi-Fi Security Training [0.0]
  Cyber Ranges (CRs) have become valuable platforms for cybersecurity training and experimentation.<n>Existing wireless-oriented solutions mainly target heterogeneous IoT or mobile-network settings.<n>This paper introduces a conceptual architecture for a Wi-Fi-focused CR tailored to IEEE 802.11 security scenarios and an open-source prototype.
  arXiv  Detail & Related papers  (2026-05-08T07:55:48Z)
• Robust Cross-Domain WiFi Fall Detection via Physics-Driven Attention-Enhanced Transformers [64.35403680946182]
  Device-free fall detection utilizing WiFi Channel State Information (CSI) has emerged as a promising solution for elderly health monitoring.<n>Existing deep learning approaches suffer from severe performance degradation when deployed in unseen environments.<n>We propose a robust, domain-general framework featuring a novel Attention-Enhanced CNN-Transformer hybrid architecture.
  arXiv  Detail & Related papers  (2026-04-23T03:28:12Z)
• What a Mesh: Formal Security Analysis of WPA3 SAE Wireless Authentication [1.1536806813645057]
  IEEE 802.11 includes a secure authentication protocol called SAE, whose use is mandatory for WPA3-Personal networks.<n> protocol is specified at two separate but linked levels: a traditional cryptographic description of the communication logic between network devices, and a state machine description that realises the former in each single device.<n>We present detailed formal models of the protocol at both levels, provide precise specifications of its security properties, and analyse machine-checked proofs in ProVerif andTA.
  arXiv  Detail & Related papers  (2026-03-24T15:54:05Z)
• AmbShield: Enhancing Physical Layer Security with Ambient Backscatter Devices against Eavesdroppers [69.56534335936534]
  AmbShield is an AmBD-assisted PLS scheme that leverages naturally distributed AmBDs to simultaneously strengthen the legitimate channel and degrade eavesdroppers'<n>In AmbShield, AmBDs are exploited as friendly jammers that randomly backscatter to create interference at eavesdroppers, and as passive relays that backscatter the desired signal to enhance the capacity of legitimate devices.
  arXiv  Detail & Related papers  (2026-01-14T20:56:50Z)
• In Numeris Veritas: An Empirical Measurement of Wi-Fi Integration in Industry [0.0]
  A critical knowledge gap exists regarding the prevalence and security configuration of Wi-Fi in real-world settings.<n>We create the first publicly available dataset of 1,087 high-confidence industrial Wi-Fi networks.<n>Our findings reveal a growing adoption of Wi-Fi across industrial sectors but underscore alarming security deficiencies.
  arXiv  Detail & Related papers  (2025-09-21T09:01:58Z)
• Bridging the Mobile Trust Gap: A Zero Trust Framework for Consumer-Facing Applications [51.56484100374058]
  This paper proposes an extended Zero Trust model designed for mobile applications operating in untrusted, user-controlled environments.<n>Using a design science methodology, the study introduced a six-pillar framework that supports runtime enforcement of trust.<n>The proposed model offers a practical and standards-aligned approach to securing mobile applications beyond pre-deployment controls.
  arXiv  Detail & Related papers  (2025-08-20T18:42:36Z)
• Large AI Model-Enabled Secure Communications in Low-Altitude Wireless Networks: Concepts, Perspectives and Case Study [92.15255222408636]
  Low-altitude wireless networks (LAWNs) have the potential to revolutionize communications by supporting a range of applications.<n>We investigate some large artificial intelligence model (LAM)-enabled solutions for secure communications in LAWNs.<n>To demonstrate the practical benefits of LAMs for secure communications in LAWNs, we propose a novel LAM-based optimization framework.
  arXiv  Detail & Related papers  (2025-08-01T01:53:58Z)
• Digital Shielding for Cross-Domain Wi-Fi Signal Adaptation using Relativistic Average Generative Adversarial Network [13.808977762165823]
  This paper introduces a novel deep learning model for cross-domain adaptation of Wi-Fi signals, inspired by physical signal shielding.<n>The system achieved 96% accuracy and demonstrated strong material discrimination capabilities, offering potential for use in security applications to identify concealed objects based on their composition.
  arXiv  Detail & Related papers  (2025-04-29T09:18:02Z)
• Securing Wi-Fi 6 Connection Establishment Against Relay and Spoofing Threats [8.770626974296949]
  Current Wi-Fi security protocols fail to fully mitigate attacks like man-in-the-middle, preamble spoofing, and relaying.<n>We design a backward-compatible scheme using a digital signature interwoven into the preambles at the physical (PHY) layer with time constraints.<n>We show that our relay attack detection achieves 96-100% true positive rates.
  arXiv  Detail & Related papers  (2025-01-02T19:49:24Z)
• ACRIC: Securing Legacy Communication Networks via Authenticated Cyclic Redundancy Integrity Check [98.34702864029796]
  Recent security incidents in safety-critical industries exposed how the lack of proper message authentication enables attackers to inject malicious commands or alter system behavior.<n>These shortcomings have prompted new regulations that emphasize the pressing need to strengthen cybersecurity.<n>We introduce ACRIC, a message authentication solution to secure legacy industrial communications.
  arXiv  Detail & Related papers  (2024-11-21T18:26:05Z)
• Generative AI for Secure Physical Layer Communications: A Survey [80.0638227807621]
  Generative Artificial Intelligence (GAI) stands at the forefront of AI innovation, demonstrating rapid advancement and unparalleled proficiency in generating diverse content. In this paper, we offer an extensive survey on the various applications of GAI in enhancing security within the physical layer of communication networks. We delve into the roles of GAI in addressing challenges of physical layer security, focusing on communication confidentiality, authentication, availability, resilience, and integrity.
  arXiv  Detail & Related papers  (2024-02-21T06:22:41Z)
• Data-Driven Latency Probability Prediction for Wireless Networks: Focusing on Tail Probabilities [10.723338393736219]
  Time-sensitive networking (TSN) can be used to achieve these requirements for switched networks. To conform the wireless link to a reliability level of 99.999%, the behavior of extremely rare outliers in the latency probability distribution, must be analyzed and controlled. This work proposes predicting the tail of the latency distribution using state-of-the-art data-driven approaches.
  arXiv  Detail & Related papers  (2023-07-20T07:23:15Z)
• Federated Spatial Reuse Optimization in Next-Generation Decentralized IEEE 802.11 WLANs [14.954710245070343]
  We explore the feasibility of applying machine learning (ML) in next-generation wireless local area networks (WLANs) More specifically, we focus on the IEEE 802.11ax spatial reuse problem and predict its performance through federated learning (FL) models. The set of FL solutions overviewed in this work is part of the 2021 International Telecommunication Union (ITU) AI for 5G Challenge.
  arXiv  Detail & Related papers  (2022-03-20T06:58:31Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.