Harvesting Smartphone Privacy Through Enhanced Juice Filming Charging Attacks

Weizhi Meng, Fei Fei, Wenjuan Li, Man Ho Au

Research output: Chapter in Book/Report/Conference proceedingArticle in proceedingsResearchpeer-review

Abstract

The increasingly high demand for smartphone charging in people’s daily lives has apparently encouraged much more public charging stations to be deployed in various places (e.g., shopping malls, airports). However, these public charging facilities may open a hole for cyber-criminals to infer private information and data from smartphone users. Juice filming charging (JFC) attack is a particular type of charging attacks, which is capable of stealing users’ sensitive information from both Android OS and iOS devices, through automatically monitoring and recording phone screen during the whole charging period. The rationale is that phone screen can be leaked through a standard micro USB connector, which adopts the Mobile High-Definition Link (MHL) standard. In practice, we identify that how to efficiently extract information from the captured videos remains a challenge for current JFC attack. To further investigate its practical influence, in this work, we focus on enhancing its performance in the aspects of extracting texts from images and correlating information, and then conducting a user study in a practical scenario. The obtained results demonstrate that our enhanced JFC attack can outperform the original one in collecting users’ information at large and extracting sensitive data with a higher accuracy. Our work aims to complement existing results and stimulate more efforts in defending smartphones against charging threats.
Original languageEnglish
Title of host publicationInformation Security
Number of pages18
Volume10599
PublisherSpringer
Publication date2017
Pages291-308
ISBN (Print)978-3-319-69658-4
ISBN (Electronic)978-3-319-69659-1
DOIs
Publication statusPublished - 2017
Event20th International conference on information security - Ho Chi Minh City, Viet Nam
Duration: 22 Nov 201724 Nov 2017

Conference

Conference20th International conference on information security
CountryViet Nam
CityHo Chi Minh City
Period22/11/201724/11/2017
SeriesLecture Notes in Computer Science
Volume10599
ISSN0302-9743

Keywords

  • Mobile privacy and security
  • Android and iOS
  • Charging threat
  • OCR technology
  • Juice filming charging attack

Fingerprint Dive into the research topics of 'Harvesting Smartphone Privacy Through Enhanced Juice Filming Charging Attacks'. Together they form a unique fingerprint.

Cite this