Harvesting Smartphone Privacy Through Enhanced Juice Filming Charging Attacks

Weizhi Meng, Fei Fei, Wenjuan Li, Man Ho Au

Research output: Chapter in book / Conference proceedingConference article published in proceeding or bookAcademic researchpeer-review

20 Citations (Scopus)

Abstract

The increasingly high demand for smartphone charging in people’s daily lives has apparently encouraged much more public charging stations to be deployed in various places (e.g., shopping malls, airports). However, these public charging facilities may open a hole for cyber-criminals to infer private information and data from smartphone users. Juice filming charging (JFC) attack is a particular type of charging attacks, which is capable of stealing users’ sensitive information from both Android OS and iOS devices, through automatically monitoring and recording phone screen during the whole charging period. The rationale is that phone screen can be leaked through a standard micro USB connector, which adopts the Mobile High-Definition Link (MHL) standard. In practice, we identify that how to efficiently extract information from the captured videos remains a challenge for current JFC attack. To further investigate its practical influence, in this work, we focus on enhancing its performance in the aspects of extracting texts from images and correlating information, and then conducting a user study in a practical scenario. The obtained results demonstrate that our enhanced JFC attack can outperform the original one in collecting users’ information at large and extracting sensitive data with a higher accuracy. Our work aims to complement existing results and stimulate more efforts in defending smartphones against charging threats.

Original languageEnglish
Title of host publicationInformation Security - 20th International Conference, ISC 2017, Proceedings
EditorsPhong Q. Nguyen, Phong Q. Nguyen, Jianying Zhou
PublisherSpringer Verlag
Pages291-308
Number of pages18
ISBN (Print)9783319696584
DOIs
Publication statusPublished - 2017
Event20th International Conference on Information Security, ISC 2017 - Ho Chi Minh City, Viet Nam
Duration: 22 Nov 201724 Nov 2017

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume10599 LNCS
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Conference

Conference20th International Conference on Information Security, ISC 2017
Country/TerritoryViet Nam
CityHo Chi Minh City
Period22/11/1724/11/17

Keywords

  • Android and iOS
  • Charging threat
  • Juice filming charging attack
  • Mobile privacy and security
  • OCR technology

ASJC Scopus subject areas

  • Theoretical Computer Science
  • General Computer Science

Fingerprint

Dive into the research topics of 'Harvesting Smartphone Privacy Through Enhanced Juice Filming Charging Attacks'. Together they form a unique fingerprint.

Cite this