Identifying People With Wi-Fi Signals

TL;DR: New research demonstrates a technique called "WiFi sensing," which uses standard Wi-Fi signals to identify people and monitor physical spaces. The method analyzes how signals are reflected and scattered by human bodies, effectively turning routers into surveillance devices without accessing cameras or other sensors.
Key facts
- Category
- Cybersecurity
- Impact
- High
- Published
- Source
- Schneier on Security
Full summary
New research shows how standard Wi-Fi signals can be used to identify and monitor people, turning routers into passive surveillance devices.
A new research area known as "WiFi sensing" demonstrates how standard Wi-Fi signals can be used to identify people within a physical space. The technique does not involve accessing a router's data, but rather analyzing the radio waves it transmits. As these signals travel, they are reflected, scattered, and absorbed by objects and people. By measuring these minute disturbances, it's possible to infer detailed information about the environment, including the presence, movement, and even the specific identity of individuals. This method effectively transforms common wireless hardware into a passive sensor network, capable of "seeing" through walls without any cameras or specialized equipment.
This capability introduces a significant and subtle privacy threat. Because WiFi sensing is invisible and leverages ubiquitous infrastructure, it can bypass traditional security measures like cameras and access controls. For businesses, this represents a new vector for corporate espionage or monitoring employee movements without their knowledge. Security teams, CTOs, and developers of connected devices must now consider the physical environment as part of their threat model in a new way. The technology challenges the notion that a space without cameras is private, as the very airwaves can be used for surveillance, raising complex questions for security policies and device design.
Tags
Related on Notifire
Primary source: Schneier on Security