Sectap: Secure Back Of Device Input System For Mobile Devices

Keywords

Motion Sensor; Secure Input; Smart Phone

Abstract

Smart mobile devices have become an integral part of people's life and users often input sensitive information on these devices. However, various side channel attacks against mobile devices pose a plethora of serious threats against user security and privacy. To mitigate these attacks, we present a novel secure Back-of-Device (BoD) input system, SecTap, for mobile devices. To use SecTap, a user tilts her mobile device to move a cursor on the keyboard and tap the back of the device to secretly input data. We design a tap detection method by processing the stream of accelerometer readings to identify the user's taps in real time. The orientation sensor of the mobile device is used to control the direction and the speed of cursor movement. We also propose an obfuscation technique to randomly and effectively accelerate the cursor movement. This technique not only preserves the input performance but also keeps the adversary from inferring the tapped keys. Extensive empirical experiments were conducted on different smart phones to demonstrate the usability and security on both Android and iOS platforms.

Publication Date

10-8-2018

Publication Title

Proceedings - IEEE INFOCOM

Volume

2018-April

Number of Pages

1520-1528

Document Type

Article; Proceedings Paper

Personal Identifier

scopus

DOI Link

https://doi.org/10.1109/INFOCOM.2018.8485939

Socpus ID

85056168530 (Scopus)

Source API URL

https://api.elsevier.com/content/abstract/scopus_id/85056168530

This document is currently not available here.

Share

COinS