A Fast Eavesdropping Attack Against Touchscreens

Abstract : The pervasiveness of mobile devices increases the risk of exposing sensitive information on the go. In this paper, we arise this concern by presenting an automatic attack against mod- ern touchscreen keyboards. We demonstrate the attack against the Apple iPhone--2010's most popular touchscreen device-- although it can be adapted to other devices (e.g., Android) that employ similar key-magnifying keyboards. Our attack processes the stream of frames from a video camera (e.g., surveillance or portable camera) and recognizes keystrokes online, in a fraction of the time needed to perform the same task by direct observation or offline analysis of a recorded video, which can be unfeasible for large amount of data. Our attack detects, tracks, and rectifies the target touchscreen, thus following the device or camera's movements and eliminating possible perspective distortions and rotations In real-world settings, our attack can automatically recognize up to 97.07 percent of the keystrokes (91.03 on average), with 1.15 percent of errors (3.16 on average) at a speed ranging from 37 to 51 keystrokes per minute.
Type de document :
Communication dans un congrès
IAS 2011 - 7th International Conference on Information Assurance and Security, Dec 2011, Melaka, Malaysia. IEEE, pp.320-325, 2011, <10.1109/ISIAS.2011.6122840>


https://hal.inria.fr/hal-00761669
Contributeur : Simone Gasparini <>
Soumis le : mercredi 5 décembre 2012 - 21:42:01
Dernière modification le : jeudi 5 novembre 2015 - 01:05:42
Document(s) archivé(s) le : mercredi 6 mars 2013 - 17:15:38

Fichier

paper122.pdf
Fichiers produits par l'(les) auteur(s)

Identifiants

Collections

Citation

Federico Maggi, Alberto Volpatto, Simone Gasparini, Giacomo Boracchi, Stefano Zanero. A Fast Eavesdropping Attack Against Touchscreens. IAS 2011 - 7th International Conference on Information Assurance and Security, Dec 2011, Melaka, Malaysia. IEEE, pp.320-325, 2011, <10.1109/ISIAS.2011.6122840>. <hal-00761669>

Exporter

Partager

Métriques

Consultations de
la notice

290

Téléchargements du document

309