A team of researchers has discovered a major security vulnerability that could impact nearly every Wi-Fi network globally. The finding will be presented at the upcoming IEEE International Conference on Computer Communications in London.
The security flaw affects MU-MIMO (multi-user, multiple input, multiple output) technology, a core component present in Wi-Fi systems since 2013. This technology enables multiple users to share network resources efficiently.
According to Francesco Restuccia, professor at Northeastern University and research team member, malicious actors could exploit the MU-MIMO setup process to severely degrade Internet speeds for other users on the network. The attack would be particularly difficult to detect since it leverages built-in Wi-Fi technologies.
"We assume that wireless networks are secure, but unfortunately some of the technologies wireless networks currently use are fundamentally insecure," explains Restuccia.
The discovery poses a complex challenge for the wireless industry. Fixing this vulnerability requires updates to the Wi-Fi standard itself - a process involving multiple stakeholders and considerable time. This means billions of existing Wi-Fi devices remain potentially vulnerable.
The research team plans to address this security concern with the IEEE (Institute of Electrical and Electronics Engineers) for potential inclusion in the upcoming Wi-Fi 8 standard. However, implementation could be years away.
Possible solutions include encrypting Wi-Fi control data, though this might result in reduced Internet speeds. The researchers emphasize that addressing this vulnerability will require extensive collaboration within the wireless communication industry.
The research received support from the National Science Foundation, the Office of Naval Research, and the Air Force Office of Scientific Research.
With Wi-Fi connecting over 20 billion devices worldwide - from smartphones to smart TVs - this discovery highlights the ongoing challenges in maintaining security in our increasingly connected world.