# Evaluation of Resource Exhaustion Attacks against Wireless Mobile Devices
## 3 Generalized Intruder Model
\begin{table}
\begin{tabular}{p{142.3 pt} p{284.5 pt}} \hline \hline
**Attack Goal** & **Decreasing the Time the Device is in a Sleep Mode in Order to Raise the Power Expenses** \\ \hline \multirow{3}{*}{Attack features} & 1. Existence of device idle states of a small energy consumption. \\  & 2. Exploiting energy consuming wireless interfaces such as RFID, infrared (IR), NFC, etc. \\  & 3. Attack category _<types1 and type2, level1 and above_> [30; 31]. \\ \hline \multirow{3}{*}{Actions of intrude} & \multicolumn{2}{p{284.5 pt}}{Growths of the energy consumption of the device by switching its modes _(idle mode_ \(\rightarrow\)_active mode_)_.} \\ \cline{2-3}  & 1. Lightweight knowledge of Linux. Downloading and installing typical software tools into the operating system. Skills of performing actions from guides. \\ \cline{2-3} Required abilities and conditions of intruder & 2. Minimal time to deploy a new attacking device is needed afterwards the arrangement of software and hardware. \\ \cline{2-3}  & 3. Mostly as an equipment it is sufficient to use a typical laptop/single-board computer. A rooted Android device may be needed to execute certain mobile applications. \\ \hline \multirow{3}{*}{Conclusion} & 1. An attack can be fulfilled without straightforward influence of the intruder (i.e., via the wireless interfaces). \\ \cline{2-3}  & 2. The attack distance depends on wave frequencies of the wireless protocol and the power of the intruder’s antenna. \\ \cline{2-3}  & 3. No need for an attacker to be authorized on the target device, intricating a productive protection from such influences. \\ \hline \hline \end{tabular}
\end{table} 
Table 1: Attacks of the denial-of-sleep class. \begin{table}
\begin{tabular}{p{142.3 pt} p{284.5 pt}} \hline \hline
**Attack Goal** & **Increasing Amounts of Income/Outcome Data and Decreasing their Speed** \\ \hline \multirow{3}{*}{Attack features} & 1. Typically devices pass data not continuously. An intruder is to increase quantities of data passed and time of the transmission. \\  & 2. Attack category _<types1 and type2, level1 and above_>. \\ \hline \multirow{3}{*}{Actions of intruder} & Attack logs into the device and starts sending data. To bypass authorization the intruder breaks the key or mounts a replay attack by using some past legitimate traffic. \\ \cline{2-3}  & The intruder should have some basic knowledge on the target system to run an attack. A common PC/single-board computer is sufficient for the intruder. A rooted Android device may be required to run some specific soft. \\ \hline \multirow{3}{*}{Conclusion} & 1. An attack can be fulfilled straightforward influence on the device. \\ \cline{2-3}  & 2. The attack distance depends on wave frequencies of the wireless protocol and the power of the antenna of the intruder. \\ \cline{2-3}  & 2. The attack distance depends on wave frequencies of the wireless protocol and the power of the antenna of the intruder. \\ \hline \hline \end{tabular}
\end{table} 
Table 2: Attacks of wireless traffic growth. All these attacks are assumed to operate continuously until the battery is completely drained. Note that the goal of the proposed model is to identify and systematize knowledge about possible types of ERE attacks and their characteristics. The model can be used to analyze the specifications of a particular cyber-physical system to determine ERE attacks its devices are prone to. Besides, the results of this analysis can be used as a basis for the development of an integrated information security system.