Keystrokes inference attack on android

A comparative evaluation of sensors and their fusion

Ahmed Mubarak Ahmed Al-Haiqi, Mahamod Ismail, Rosdiadee Nordin

Research output: Contribution to journalArticle

6 Citations (Scopus)

Abstract

Introducing motion sensors into smartphones contributed to a wide range of applications in human-phone interaction, gaming, and many others. However, built-in sensors that detect subtle motion changes (e.g. accelerometers), might also reveal information about taps on touch screens: the main user input mode. Few researchers have already demonstrated the idea of exploiting motion sensors as side-channels into inferring keystrokes. Taken at most as initial explorations, much research is still needed to analyze the practicality of the new threat and examine various aspects of its implementation. One important aspect affecting directly the attack effectiveness is the selection of the right combination of sensors, to supply inference data. Although other aspects also play crucial role (e.g. the features set), we start in this paper by focusing on the comparison of different available sensors, in terms of the inference accuracy. We consider individual sensors shipped on Android phones, and study few options of preprocessing their raw datasets as well as fusing several sensors' readings. Our results indicate an outstanding performance of the gyroscope, and the potential of sensors data fusion. However, it seems that sensors with magnetometer component or the accelerometer alone have less benefit in the context of the adverted attack.

Original languageEnglish
Pages (from-to)117-136
Number of pages20
JournalJournal of ICT Research and Applications
Volume7
Issue number2
DOIs
Publication statusPublished - 01 Jan 2013

Fingerprint

Fusion reactions
Sensors
Accelerometers
Sensor data fusion
Touch screens
Inference
Evaluation
Attack
Fusion
Sensor
Smartphones
Gyroscopes
Magnetometers

All Science Journal Classification (ASJC) codes

  • Computer Science(all)
  • Information Systems and Management
  • Electrical and Electronic Engineering

Cite this

@article{a5e12fcbc6e546ab9465fdf1c9b68031,
title = "Keystrokes inference attack on android: A comparative evaluation of sensors and their fusion",
abstract = "Introducing motion sensors into smartphones contributed to a wide range of applications in human-phone interaction, gaming, and many others. However, built-in sensors that detect subtle motion changes (e.g. accelerometers), might also reveal information about taps on touch screens: the main user input mode. Few researchers have already demonstrated the idea of exploiting motion sensors as side-channels into inferring keystrokes. Taken at most as initial explorations, much research is still needed to analyze the practicality of the new threat and examine various aspects of its implementation. One important aspect affecting directly the attack effectiveness is the selection of the right combination of sensors, to supply inference data. Although other aspects also play crucial role (e.g. the features set), we start in this paper by focusing on the comparison of different available sensors, in terms of the inference accuracy. We consider individual sensors shipped on Android phones, and study few options of preprocessing their raw datasets as well as fusing several sensors' readings. Our results indicate an outstanding performance of the gyroscope, and the potential of sensors data fusion. However, it seems that sensors with magnetometer component or the accelerometer alone have less benefit in the context of the adverted attack.",
author = "{Ahmed Al-Haiqi}, {Ahmed Mubarak} and Mahamod Ismail and Rosdiadee Nordin",
year = "2013",
month = "1",
day = "1",
doi = "10.5614/itbj.ict.res.appl.2013.7.2.2",
language = "English",
volume = "7",
pages = "117--136",
journal = "Journal of ICT Research and Applications",
issn = "2337-5787",
publisher = "Institut Teknologi Bandung (ITB)",
number = "2",

}

Keystrokes inference attack on android : A comparative evaluation of sensors and their fusion. / Ahmed Al-Haiqi, Ahmed Mubarak; Ismail, Mahamod; Nordin, Rosdiadee.

In: Journal of ICT Research and Applications, Vol. 7, No. 2, 01.01.2013, p. 117-136.

Research output: Contribution to journalArticle

TY - JOUR

T1 - Keystrokes inference attack on android

T2 - A comparative evaluation of sensors and their fusion

AU - Ahmed Al-Haiqi, Ahmed Mubarak

AU - Ismail, Mahamod

AU - Nordin, Rosdiadee

PY - 2013/1/1

Y1 - 2013/1/1

N2 - Introducing motion sensors into smartphones contributed to a wide range of applications in human-phone interaction, gaming, and many others. However, built-in sensors that detect subtle motion changes (e.g. accelerometers), might also reveal information about taps on touch screens: the main user input mode. Few researchers have already demonstrated the idea of exploiting motion sensors as side-channels into inferring keystrokes. Taken at most as initial explorations, much research is still needed to analyze the practicality of the new threat and examine various aspects of its implementation. One important aspect affecting directly the attack effectiveness is the selection of the right combination of sensors, to supply inference data. Although other aspects also play crucial role (e.g. the features set), we start in this paper by focusing on the comparison of different available sensors, in terms of the inference accuracy. We consider individual sensors shipped on Android phones, and study few options of preprocessing their raw datasets as well as fusing several sensors' readings. Our results indicate an outstanding performance of the gyroscope, and the potential of sensors data fusion. However, it seems that sensors with magnetometer component or the accelerometer alone have less benefit in the context of the adverted attack.

AB - Introducing motion sensors into smartphones contributed to a wide range of applications in human-phone interaction, gaming, and many others. However, built-in sensors that detect subtle motion changes (e.g. accelerometers), might also reveal information about taps on touch screens: the main user input mode. Few researchers have already demonstrated the idea of exploiting motion sensors as side-channels into inferring keystrokes. Taken at most as initial explorations, much research is still needed to analyze the practicality of the new threat and examine various aspects of its implementation. One important aspect affecting directly the attack effectiveness is the selection of the right combination of sensors, to supply inference data. Although other aspects also play crucial role (e.g. the features set), we start in this paper by focusing on the comparison of different available sensors, in terms of the inference accuracy. We consider individual sensors shipped on Android phones, and study few options of preprocessing their raw datasets as well as fusing several sensors' readings. Our results indicate an outstanding performance of the gyroscope, and the potential of sensors data fusion. However, it seems that sensors with magnetometer component or the accelerometer alone have less benefit in the context of the adverted attack.

UR - http://www.scopus.com/inward/record.url?scp=84901808968&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84901808968&partnerID=8YFLogxK

U2 - 10.5614/itbj.ict.res.appl.2013.7.2.2

DO - 10.5614/itbj.ict.res.appl.2013.7.2.2

M3 - Article

VL - 7

SP - 117

EP - 136

JO - Journal of ICT Research and Applications

JF - Journal of ICT Research and Applications

SN - 2337-5787

IS - 2

ER -