Re: [Discuss-gnuradio] 802.16 jammer with USRP/GnuRadio?

[Stevie]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

Hi,

> Here's an unusual request.
>
> I'm discussing 802.16 (WiMaX) jamming resistance with some of my
> colleagues. Since I do security for a living, I like to think about
> these things. I don't see anything in the specs that would
> immediately render a jammer an impractical project for an
> poorly-funded adversary.

Traditional jamming is probably hard given the required power levels.
Lin and Noubir (google for "On Link Layer Denial of Service in Data
Wireless LANs") consider 802.11a and show that jamming just  one
complete symbol will cause the frame to be retransmitted and so a
pulsed jamming signal could be effective.

You may want to take a look at the 802.16 working group document IEEE
C802.16e-04/406. The author reviews a number of MAC layer attacks but
also looks briefly at the carrier-sense PHY layer attacks. These
attacks are very low power when compared to traditional jamming
attacks and very effective. It looks like carrier-sense attacks would
be doable with a suitable radio front end and a USRP could very easily
do the job of generating the required carrier.

Kind regards,

Steve
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDUDqLW7aAm65EWy4RAwgLAKDpbe35a2R+xDEZXDnuPM38NQQ2rgCeJSpO
juByoY6fM6g3Z9JOv+0vdeo=
=mEf+
-----END PGP SIGNATURE-----