arXiv subjects

Francois Horlin

Publications and source records attributed to Francois Horlin.

4 recordsLinked to original sources

arXiv2025

OFDM-based JCAS under Attack: The Dual Threat of Spoofing and Jamming in WLAN Sensing

This study reveals the vulnerabilities of Wireless Local Area Networks (WLAN) sensing, under the scope of joint communication and sensing (JCAS), focusing on target spoofing and deceptive jamming techniques. We use orthogonal frequency-division multiplexing (OFDM) to explore how adversaries can exploit WLAN's sensing capabilities to inject false targets and disrupt normal operations. Unlike traditional methods that require sophisticated digital radio-frequency memory hardware, we demonstrate that much simpler software-defined radios can effectively serve as deceptive jammers in WLAN settings. Through comprehensive modeling and practical experiments, we show how deceptive jammers can manipulate the range-Doppler map (RDM) by altering signal integrity, thereby posing significant security threats to OFDM-based JCAS systems. Our findings comprehensively evaluate jammer impact on RDMs and propose several jamming strategies that vary in complexity and detectability.

cs.CR↗

arXiv2024

Hybrid Fusion for 802.11ax Wi-Fi-based Passive Radars Exploiting Beamforming Feedbacks

Passive Wi-Fi-based radars (PWRs) are devices that enable the localization of targets using Wi-Fi signals of opportunity transmitted by an access point. Unlike active radars that optimize their transmitted waveform for localization, PWRs align with the 802.11 amendments. Specifically, during the channel sounding session preceding a multi-user multiple-input multiple-output downlink transmission, an access point isotropically transmits a null data packet (NDP) with a known preamble. From these known symbols, client user equipments derive their channel state information and transmit an unencrypted beamforming feedback (BFF) back to the access point. The BFF comprises the right singular matrix of the channel and the corresponding stream gain for each subcarrier, which allows the computation of a beamforming matrix at the access point. In a classical PWR processing, only the preamble symbols from the NDP are exploited during the channel sounding session. In this study, we investigate multiple target localization by a PWR exploiting hybrid information sources. On one hand, the joint angle-of-departure and angle-of-arrival evaluated from the NDP. On another hand, the line-of-sight angle-of-departures inferred from the BFFs. The processing steps at the PWR are defined and an optimal hybrid fusion rule is derived in the maximum likelihood framework. Monte-Carlo simulations assess the enhanced accuracy of the proposed combination method compared to classical PWR processing based solely on the NDP, and compare the localisation performance between client and non-client targets.

eess.SP↗

arXiv2023

A Spatial Data Focusing and Generalized Time-invariant Frequency Diverse Array Approach for High Precision Range-angle-based Geocasting

A novel unified frequency diverse array (FDA) and spatial data focusing (SDF) approach is proposed to simultaneously overcome time-variance and precision constraints of conventional FDA in geocasting, i.e., spatially confined broadcasting, scenarios. This paper describes a free space FDA-based SDF (FDA-SDF) system model for 2-dimensional range-angle-based focusing, including a generalized multi-purpose baseband approach for time-invariant FDA, complemented by SDF processing for improved spatial focusing precision and reduced array size. Comprehensive analytical derivations - general for any frequency offset configuration - describe the geographical FDA-SDF properties and design rules, such as geocast delivery zone steering, location, uniqueness, and size. Simulations of the proposed scheme validate theoretical derivations and demonstrate FDA-SDF's superior spatial precision and minimal design complexity. In particular, using novel alternating logarithmic frequency offsets, a 3-antenna FDA-SDF setup is shown to match the radial and azimuthal precision of its beamforming-based FDA counterpart using, respectively, 64 and 24 antennas.

eess.SP↗

arXiv2019

Comments on "Probabilities of Error for Adaptive Reception of M-Phase Signals"

Paper [1] derived the probability density function (PDF) of a sum of products of two correlated complex Gaussian zero-mean random variables (RVs) that has been applied to calculate the error probabilities of a \emph{M}-ary phase shift keying (\emph{M}-PSK) system. We show that there exist some typos in the computation and we provide the detailed derivation leading to the correct expressions.

eess.SP↗