JFCGuard: Detecting juice filming charging attack via processor usage analysis on smartphones

Weizhi Meng, Lijun Jiang, Yu Wang*, Jin Li, Jun Zhang, Yang Xiang

*Corresponding author for this work

Research output: Contribution to journalJournal articleResearchpeer-review

78 Downloads (Pure)

Abstract

Smartphones have become necessities in people' lives, so that many more public charging stations are under deployment worldwide to meet the increasing demand of phone charging (i.e., in airports, subways, shops, etc). However, this situation may expose a hole for cyber-criminals to launch various attacks especially charging attacks and threaten user's privacy. As an example, juice filming charging (JFC) attack is able to steal users' sensitive and private information from both Android OS and iOS devices, through automatically recording phone-screen and monitoring users' inputs during the whole charging period. More importantly, this attack does not need any permission or installing any pieces of apps on user's side. The rationale is that users' information can be leaked through a standard micro USB connector that employs the Mobile High-Definition Link (MHL) standard. Motivated by the potential damage of JFC attack, in this work, we investigate the impact of JFC attack on processor usage including both CPU- and GPU-usage. It is found that JFC attack would cause a noticeable usage increase when connecting the phone to the JFC charger. Then, we design a security mechanism, called JFCGuard, to detect JFC attack based on processor usage analysis for smartphone users. In the evaluation, we perform a user study with over 250 participants and the results demonstrate that JFCGuard can identify JFC attack in an effective way. Our work aims to complement existing research results and stimulate more research in this area.
Original languageEnglish
JournalComputers & Security
Volume76
Pages (from-to)252-264
Number of pages13
ISSN0167-4048
DOIs
Publication statusPublished - 2018

Keywords

  • Charging threat
  • Mobile security
  • Smartphone privacy
  • Android and iOS device
  • Juice filming charging attack
  • Detection mechanism

Fingerprint Dive into the research topics of 'JFCGuard: Detecting juice filming charging attack via processor usage analysis on smartphones'. Together they form a unique fingerprint.

Cite this