Camera Based Attacks On Mobile Phones
Geeta Nage, Ashwini Jadhav, Azar Kazi, Sandesh Mundhe · International Journal of Modern Trends in Engineering and Research · 2016
Now a days mobile smartphones are very powerful,and many smartphone applications use wireless multimedia communications. Mobile phone security is important security issues in wireless multimedia communications.In mobile operating system, Android security has been extensively studied by researchers. However, few works have studied mobile phone multimedia security. We mainly focus on security issues related to mobile phone cameras. Several new attacks are discovered based on the use of phone cameras. We implement the attacks on real phones, and show the possibility and efficiency of the attacks. moreover, we propose a lightweight defense scheme that can proficiently detect these attacks. Keywords — Smart phone , Spy camera , Wifi , Passcode I. INTRODUCTION The Android operating system(OS) has gain an unbelievable rate of popularity. since 2013, the Android OS has 79.3 percent of smartphone market shares.Android security and privacy vulnerabilities have been uncovered in large numbers. Even if,before installation the Android permission system gives an opportunity to user to check the permission of an application(app), many users don't have knowledge of all these permission requests ; so, they not able to notify to the users about security risks. In recent years,in Android app markets number of apps are precise to provide security and protect user privacy. Android-version security apps have been published by anti-virus software companies, and tried to protect smartphones by detecting and blocking msalicious apps. There are also the data protection apps which provide means to the users to encrypt, decrypt, sign,and verify signatures for private texts, emails and files. For mobile phone security and privacy mobile malware and privacy leakage become a big issue.Generally, when we talking about privacy protection,safety of SMS, emails, contact lists, calling histories,location information, and private files are considered.The phone camera could also become a spy; for example, attackers could take pictures silently and record videos by using the phone camera. In this days,different types of camera- based applications have available in Android app markets (photography,barcode readers, social networking, etc.). Spy camera apps become most popular. For Google Play,almost 100 spy camera apps are available, using this phone users take pictures or record videos of other people without their permission. but,it is also possible that phone users itself become victims. Attackers can implement spy cameras in malicious apps such that the phone camera is activate automatically without the device owner's permission, and the captured photos and videos are sent out to these remote attackers. Nowadays, people carry their phones everywhere;hence, then lots of private information is being captured. If the phone camera is exploited by a malicious spy camera app, it may cause serious security and privacy problems. For example, the phone camera may record a user's daily activities and conversations, and then send these out via the Internet or multimedia messaging service(MMS). Secret photography is considered as a illegal in some countries due to the security attack. A phone camera could also play vital role if it is well controlled by the device owner. For example,when the owner wants to check if someone has used his/her phone without permission, the phone camera could be used to record the face of an unauthorized user. as well, it can help the owner to find a lost phone. In this paper we present the basic attack model and two camera based attacks: the remote- controlled real-time monitoring attack and the passcode inference attack. We implement these