Exploiting smart-phone USB connectivity for fun and profit

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2010, Pages 357-366

  Wang, Zhaohui ^a   Stavrou, Angelos ^a  

^a George Mason University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

OPEN SYSTEMS; SMARTPHONES; SYSTEM BUSES;

ATTACK STRATEGIES; DE FACTO STANDARD; DEFAULT BEHAVIOR; END TO END; GOOGLE+; OPEN SOURCE OPERATING SYSTEMS; PROTECTION MECHANISMS; SERIAL BUS COMMUNICATION; SMART PHONES; UNIVERSAL SERIAL BUS;

DATA TRANSFER;

EID: 78751488518     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1920261.1920314     Document Type: Conference Paper

References (26)

1. Android. http://developer.android.com/.
2. Autoplay in windows xp: Automatically detect and react to new devices on a system. http://msdn.microsoft.com/en-us/magazine/cc301341.aspx.
3. Dark side arises for phone apps. http://online.wsj.com/article/ SB10001424052748703340904575284532175834088.html?mod=WSJ-newsreel-technology.
4. Hacking windows ce. http://www.phrack.org/issues.html?issue=63&id=6.
5. Nexus one features and specifications. http://www.google.com/phone/ static/en-US-nexusone-tech-specs.html.
6. Sms phishing, records system and method. http://www.f-secure.com/weblog/ archives/archive-042007.html.
7. Usb 2.0 specification. http://www.usb.org.
8. Usb gadget api for linux. http://www.kernel.org/doc/htmldocs/gadget.html.
9. Usb on-the-go. http://www.usb.org/developers/onthego/.
10. BICKFORD, J., O'HARE, R., BALIGA, A., GANAPATHY, V., AND IFTODE, L. Rootkits on smart phones: attacks, implications and opportunities. In HotMobile '10: Proceedings of the Eleventh Workshop on Mobile Computing Systems & Applications (New York, NY, USA, 2010), ACM, pp. 49-54.
11. BURNS, J. Mobile application security on android. In Black Hat '09 (2009), Black Hat USA.
12. DAVID, F. M., CHAN, E. M., CARLYLE, J. C., AND CAMPBELL, R. H. Cloaker: Hardware supported rootkit concealment. In SP '08: Proceedings of the 2008 IEEE Symposium on Security and Privacy (Washington, DC, USA, 2008), IEEE Computer Society, pp. 296-310.
13. ENCK, W., GILBERT, P., GON CHUN, B., JUNG, L. P. C. J., MCDANIEL, P., AND SHETH, A. N. Taintdroid: An information-flow tracking system for realtime privacy monitoring on smartphones. In OSDI '10: Proceedings of the 9th symposium on Operating systems design and implementation (New York, NY, USA, 2010), ACM, pp. 255-270.
14. ENCK, W., AND MCDANIEL, P. Understanding android's security framework. In CCS '08: Proceedings of the 15th ACM conference on Computer and communications security (New York, NY, USA, 2008), ACM, pp. 552-561.
15. ENCK, W., TRAYNOR, P., MCDANIEL, P., AND LA PORTA, T. Exploiting open functionality in sms-capable cellular networks. In CCS '05: Proceedings of the 12th ACM conference on Computer and communications security (New York, NY, USA, 2005), ACM, pp. 393-404.
16. KIM, H., SMITH, J., AND SHIN, K. G. Detecting energy-greedy anomalies and mobile malware variants. In MobiSys '08: Proceeding of the 6th international conference on Mobile systems, applications, and services (New York, NY, USA, 2008), ACM, pp. 239-252.
17. LIU, L., YAN, G., ZHANG, X., AND CHEN, S. Virusmeter: Preventing your cellphone from spies. In RAID '09: Proceedings of the 12th International Symposium on Recent Advances in Intrusion Detection (Berlin, Heidelberg, 2009), Springer-Verlag, pp. 244-264.
18. MOYERS, B. R., DUNNING, J. P., MARCHANY, R. C., AND TRONT, J. G. Effects of wi-fi and bluetooth battery exhaustion attacks on mobile devices. In HICSS '10: Proceedings of the 2010 43rd Hawaii International Conference on System Sciences (Washington, DC, USA, 2010), IEEE Computer Society, pp. 1-9.
19. MUTHUKUMARAN, D., SAWANI, A., SCHIFFMAN, J., JUNG, B. M., AND JAEGER, T. Measuring integrity on mobile phone systems. In SACMAT '08: Proceedings of the 13th ACM symposium on Access control models and technologies (New York, NY, USA, 2008), ACM, pp. 155-164.
20. NASH, D. C., MARTIN, T. L., HA, D. S., AND HSIAO, M. S. Towards an intrusion detection system for battery exhaustion attacks on mobile computing devices. In PERCOMW '05: Proceedings of the Third IEEE International Conference on Pervasive Computing and Communications Workshops (Washington, DC, USA, 2005), IEEE Computer Society, pp. 141-145.
21. ONGTANG, M., MCLAUGHLIN, S., ENCK, W., AND MCDANIEL, P. Semantically rich application-centric security in android. In In ACSAC '09: Annual Computer Security Applications Conference (2009).
22. RADMILO RACIC, D. M., AND CHEN, H. Exploiting mms vulnerabilities to stealthily exhaust mobile phoneŠs battery. In In SecureComm 06 (2006), SECURECOMM, pp. 1-10.
23. SHABTAI, A., FLEDEL, Y., KANONOV, U., ELOVICI, Y., AND DOLEV, S. Google android: A state-of-the-art review of security mechanisms. CoRR abs/0912.5101 (2009).
24. SHABTAI, A., FLEDEL, Y., KANONOV, U., ELOVICI, Y., DOLEV, S., AND GLEZER, C. Google android: A comprehensive security assessment. IEEE Security and Privacy 8 (2010), 35-44.
25. TRAYNOR, P., ENCK, W., MCDANIEL, P., AND PORTA, T. L. Mitigating attacks on open functionality in sms-capable cellular networks. IEEE/ACM Trans. Netw. 17, 1 (2009), 40-53.
26. XU, N., ZHANG, F., LUO, Y., JIA, W., XUAN, D., AND TENG, J. Stealthy video capturer: a new video-based spyware in 3g smartphones. In WiSec '09: Proceedings of the second ACM conference on Wireless network security (New York, NY, USA, 2009), ACM, pp. 69-78.