Harvesting Smartphone Privacy Through Enhanced Juice Filming Charging Attacks

Research output: Journal Publications and Reviews (RGC: 21, 22, 62)21_Publication in refereed journal

10 Scopus Citations
View graph of relations

Author(s)

Related Research Unit(s)

Detail(s)

Original languageEnglish
Pages (from-to)291-308
Journal / PublicationLecture Notes in Computer Science
Volume10599
Publication statusPublished - Nov 2017

Conference

Title20th International Conference on Information Security (ISC 2017)
PlaceViet Nam
CityHo Chi Minh City
Period22 - 24 November 2017

Abstract

The increasingly high demand for smartphone charging in people’s daily lives has apparently encouraged much more public charging stations to be deployed in various places (e.g., shopping malls, airports). However, these public charging facilities may open a hole for cyber-criminals to infer private information and data from smartphone users. Juice filming charging (JFC) attack is a particular type of charging attacks, which is capable of stealing users’ sensitive information from both Android OS and iOS devices, through automatically monitoring and recording phone screen during the whole charging period. The rationale is that phone screen can be leaked through a standard micro USB connector, which adopts the Mobile High-Definition Link (MHL) standard. In practice, we identify that how to efficiently extract information from the captured videos remains a challenge for current JFC attack. To further investigate its practical influence, in this work, we focus on enhancing its performance in the aspects of extracting texts from images and correlating information, and then conducting a user study in a practical scenario. The obtained results demonstrate that our enhanced JFC attack can outperform the original one in collecting users’ information at large and extracting sensitive data with a higher accuracy. Our work aims to complement existing results and stimulate more efforts in defending smartphones against charging threats.

Research Area(s)

  • Android and iOS, Charging threat, Juice filming charging attack, Mobile privacy and security, OCR technology