Security Risks and Protection Levels of Mobile Device Users on Public Wi-Fi Networks

Muhammad Adha Darojat

doi:10.61722/jssr.v4i6.13321

Authors

Muhammad Adha Darojat Universitas Islam Negeri Syarif Hidayatullah Jakarta

DOI:

https://doi.org/10.61722/jssr.v4i6.13321

Keywords:

keamanan nirkabel, man-in-the-middle, perangkat seluler, tinjauan sistematis, Wi-Fi publik

Abstract

Wi-Fi publik memudahkan akses internet, tetapi membuka risiko bagi data pengguna perangkat seluler. Tinjauan sistematis (PRISMA) ini mensintesis 23 studi terbitan 2022–2026 yang teks lengkapnya dapat diakses. Pencarian di Semantic Scholar menghasilkan 943 artikel, 581 di antaranya memiliki teks lengkap yang dapat diakses; setelah penyaringan judul dan abstrak, 25 studi lolos dan 23 dapat dibaca penuh. Tiga pertanyaan penelitian diajukan: jenis serangan yang paling sering menargetkan pengguna seluler di Wi-Fi publik (RQ1), faktor yang membuat perangkat seluler lebih rentan dibanding desktop (RQ2), dan mitigasi teknis yang efektif (RQ3). Kategori serangan yang paling banyak dibahas adalah penyadapan/analisis trafik dan man-in-the-middle (MitM), disusul rogue access point atau jaringan palsu, deauthentication, dan serangan terhadap handshake WPA2 (KRACK). Faktor kerentanan yang dilaporkan mencakup kesadaran pengguna yang hanya berada pada tingkat sedang, pembaruan OS yang tertunda, praktik TLS yang lemah di aplikasi, dan kebocoran identitas perangkat lewat sinyal nirkabel. Mitigasi yang dilaporkan meliputi deteksi serangan, pembaruan perangkat, VPN (sebagai rekomendasi), validasi sertifikat TLS, dan edukasi pengguna. Hanya satu studi yang menguji Android dan Linux pada skenario serangan yang sama, tidak ada evaluasi MAC randomization, dan tidak ada pengukuran empiris efektivitas VPN, sehingga jawaban RQ2 dan RQ3 bersifat parsial. Temuan ini menuntut evaluasi empiris komparatif atas mitigasi di Wi-Fi publik.

References

Acar, A., Tuncay, G. S., Luques, E., Oz, H., Aris, A., & Uluagac, S. (2024). 50 Shades of Support: A Device-Centric Analysis of Android Security Updates. NDSS 2024. https://doi.org/10.14722/ndss.2024.24175

Amin, M. Y., Isnaeni, D., & Utami, N. S. (2024). Legal Protection of Public WiFi Users from Cyber Crime. Jurnal Mercatoria, 17(2), 217–226. https://doi.org/10.31289/mercatoria.v17i2.12599

Autefage, V., & Magoni, D. (2025). Secure Virtual Networks Built with Noise Tunnels and Iroha Key Management. IEEE Virtual Conference on Communications 2025. https://doi.org/10.1109/VCC67261.2025.11351221

Bartłomiejczyk, M., & El Fray, I. (2024). Device Risk Analysis Protocol for SMS-Based OTP Authentication. IEEE Access, 12. https://doi.org/10.1109/ACCESS.2024.3445931

Berbecaru, D. G. (2025). TPValCert: Privacy-Preserving Trusted Proxy for Public Key Certificate Validation. IEEE ISCC 2025. https://doi.org/10.1109/ISCC65549.2025.11326465

Candiwan, C., & Rianda, L. M. (2024). Transactions at Your Fingertips: Influential Factors in Information Security Behavior for Mobile Banking Users. International Journal of Safety and Security Engineering, 14(3), 795–806. https://doi.org/10.18280/ijsse.140312

Das, T., Ali, A., & Mikkonen, T. (2024). Taxonomy of Security-related Issues in Android Apps: An Empirical Study. ASEW ’24. https://doi.org/10.1145/3695750.3695824

Engel, M., Ramadhan, A., Abdurachman, E., & Trisetyarso, A. (2022). Mobile Device Security: A Systematic Literature Review on Research Trends, Methods and Datasets. Journal of System and Management Sciences, 12(2), 66–78. https://doi.org/10.33168/jsms.2022.0204

Ferreira, P. C. S. (2026). Prevalência de Anti-Padrões de Segurança de Rede em Aplicativos Flutter de Código Aberto. Revista Científica Sistemática, 16(8). https://sevenpubl.com.br/RCS/article/download/10871/16823

Girish, A., Hu, T.-R., Prakash, V., Dubois, D. J., Matic, S., Huang, D. Y., Egelman, S., Reardon, J., Tapiador, J., Choffnes, D., & Vallina-Rodríguez, N. (2023). In the Room Where It Happens: Characterizing Local Communication and Threats in Smart Homes. ACM IMC ’23. https://doi.org/10.1145/3618257.3624830

Guo, N., Chen, Z.-F., Xu, H., Liu, Y., Zhao, Z., & Xu, S. (2024). WMLinks: Wearable Smart Devices and Mobile Phones Linking through Bluetooth Low Energy (BLE) and WiFi Signals. Electronics, 13(16), 3268. https://doi.org/10.3390/electronics13163268

Harshvardhan, B., Saideep, C., Atharv, D., Ankit, J., & Bhise, A. (2023). A Secure Messaging Application with Unbreakable End to End Encryption. IJRASET, 11(V), 234–239. https://doi.org/10.22214/ijraset.2023.50805

Hu, X., Huang, Y., & Wang, Q. (2025). Video Transmission Behavior Detection Based on Differential Traffic Features. BDCTA 2025. https://doi.org/10.1145/3727505.3727531

Khamis, Z. A. (2025). Examining Information Security Knowledge, Attitude, and Behaviour among Mobile Banking Users in Zanzibar. East African Journal of Information Technology, 8(1), 92–101. https://doi.org/10.37284/eajit.8.1.3010

Majors, J., Barsallo Yi, E., Maji, A., Wu, D., Bagchi, S., & Machiry, A. (2023). Security Properties of Virtual Remotes and SPOOKing their violations. ACM ASIA CCS ’23. https://doi.org/10.1145/3579856.3582834

Mwakajwanga, G. H., & Mwambe, O. (2024). Digital-Signature Oriented Steganography Approach against Man-in-the-Middle Attack. International Journal of Interactive Mobile Technologies, 18(16). https://doi.org/10.3991/ijim.v18i16.48709

Oludayo, O. I., Kikelomo, A. A., Adedeji, A. A., & Ayodeji, A. A. (2023). A Review of Smartphone Security Challenges and Prevention. IRJIET, 7(5), 234–245. https://doi.org/10.47001/irjiet/2023.705030

Ramezanpour, K., Jagannath, J., & Jagannath, A. (2022). Security and Privacy vulnerabilities of 5G/6G and WiFi 6: Survey and Research Directions from a Coexistence Perspective. arXiv:2206.14997. http://arxiv.org/pdf/2206.14997

Riza, F., Hendrakusuma, D. F., & Wibowo, B. (2025). An Energy-Efficient ESP32 IoT System for Real-Time Detection of WiFi Deauthentication Attacks. International Journal of Engineering Continuity, 4(2). https://ejournal.sultanpublisher.com/index.php/ijec/article/download/433/310

Saini, R., Halder, D., & Baswade, A. M. (2022). RIDS: Real-time Intrusion Detection System for WPA3 enabled Enterprise Networks. arXiv:2207.02489. https://arxiv.org/pdf/2207.02489

Trianto, N., Priambodo, D. F., & Insani, D. A. (2022). Implementasi KRACK dan KRACK Detector terhadap Wpa_Supplicant pada Perangkat Android dan Linux Ubuntu. Jurnal TIKomSiN, 10(2). https://doi.org/10.30646/tikomsin.v10i2.639

Yang, Y., Deng, R. H., Yang, G.-M., Li, Y.-J., Pang, H., Huang, M., Shi, R., & Weng, J. (2024). PriSrv: Privacy-Enhanced and Highly Usable Service Discovery in Wireless Communications. NDSS 2024. https://doi.org/10.14722/ndss.2024.24174

Zukarnain, Z., Muneer, A., & Ab Aziz, M. K. (2022). Authentication Securing Methods for Mobile Identity: Issues, Solutions and Challenges. Symmetry, 14(4), 821. https://doi.org/10.3390/sym14040821

Security Risks and Protection Levels of Mobile Device Users on Public Wi-Fi Networks

Authors

DOI:

Keywords:

Abstract

References

Downloads

Published

Issue

Section

License

MENU