SSIDs in the wild: Extracting semantic information from WiFi SSIDs

WiFi networks are becoming increasingly ubiquitous. In addition to providing network connectivity, WiFi finds applications in areas such as indoor and outdoor localisation, home automation, and physical analytics. In this paper, we explore the semantics of one key attribute of a WiFi network, SSID name. Using a dataset of approximately 120,000 WiFi access points and their corresponding geo-locations, we use a set of similarity metrics to relate SSID names to known business venues such as cafes, theatres, and shopping centres. Such correlations can be exploited by an adversary who has access to smartphone users preferred networks lists to build an accurate profile of the user and thus can be a potential privacy risk to the users.

[1]  Tim Kindberg,et al.  "Merolyn the Phone": A Study of Bluetooth Naming Practices (Nominated for the Best Paper Award) , 2007, UbiComp.

[2]  Aruna Seneviratne,et al.  A measurement study of tracking in paid mobile applications , 2015, WISEC.

[3]  Vincent Roca,et al.  Short paper: WifiLeaks: underestimated privacy implications of the access_wifi_state android permission , 2014, WiSec '14.

[4]  Roksana Boreli,et al.  I know who you will meet this evening! Linking wireless devices using Wi-Fi probe requests , 2012, 2012 IEEE International Symposium on a World of Wireless, Mobile and Multimedia Networks (WoWMoM).

[5]  M. Persson,et al.  "Loli: I Love It, I Live with It": Exploring the Practice of Nicknaming Mobile Phones , 2013 .

[6]  Srinivasan Seshan,et al.  Can Ferris Bueller Still Have His Day Off? Protecting Privacy in the Wireless Era , 2007, HotOS.

[7]  Roksana Boreli,et al.  Inferring user relationship from hidden information in WLANs , 2012, MILCOM 2012 - 2012 IEEE Military Communications Conference.

[8]  Michael Weber,et al.  Device Names in the Wild: Investigating Privacy Risks of Zero Configuration Networking , 2013, 2013 IEEE 14th International Conference on Mobile Data Management.

[9]  Eamonn O'Neill,et al.  Interpreting technology-mediated identity: perception of social intention and meaning in Bluetooth names , 2010, Australasian Computer-Human Interaction Conference.

[10]  Ana Ferreira,et al.  Socio-Technical Study on the Effect of Trust and Context When Choosing WiFi Names , 2013, STM.

[11]  Vassilis Kostakos,et al.  Instrumenting the City: Developing Methods for Observing and Understanding the Digital Cityscape , 2006, UbiComp.