EnGarde: Protecting the mobile phone from malicious NFC interactions

MobiSys 2013 - Proceedings of the 11th Annual International Conference on Mobile Systems, Applications, and Services

Volumn , Issue , 2013, Pages 445-458

  Gummeson, Jeremy ^a   Priyantha, Bodhiu ^b   Ganesan, Deepak ^a   Thrasher, Derek ^a   Zhang, Pengyu ^a  

^a UNIVERSITY OF MASSACHUSETTS   (United States)

^b MICROSOFT RESEARCH   (United States)

Author keywords

Near Field Communications; Passive Systems

Indexed keywords

FINANCIAL INFORMATION; HARDWARE DESIGN; LOW POWER; MOBILE PAYMENT; NEAR FIELD COMMUNICATIONS; PASSIVE SYSTEMS; TECHNICAL CHALLENGES; USER EXPERIENCE;

COMMUNICATION SYSTEMS; JAMMING; MOBILE DEVICES; MOBILE PHONES; TELEPHONE SETS;

CELLULAR TELEPHONES;

EID: 84881158363     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2462456.2464455     Document Type: Conference Paper

References (21)

1. xda-developers forum post. http://forum.xda-developers.com/showthread. php?t=1980356.
2. A. V. Aho and M. J. Corasick. Efficient string matching: an aid to bibliographic search. Communications of the ACM, 18(6):333-340, 1975.
3. V. A. Bhole, R. R. More, and N. C. Khadke. Security in near field communication (NFC) strengths and weaknesses. In Proceedings of the 2nd National Conference on Emerging Trends in Information Technology: EIT-2007, page 71. IK International Pvt Ltd, 2007.
4. Y. H. Cho and W. H. Mangione-Smith. Deep packet filter with dedicated logic and read only memories. In Field-Programmable Custom Computing Machines, 2004. FCCM 2004. 12th Annual IEEE Symposium on, pages 125-134. IEEE, 2004.
5. S. Clark. http://www.nfcworld.com/2012/02/09/313079/researcher-hacks- google-wallet-pin-on-rooted-android-phone/, Feb. 2012.
6. G. de Koning Gans, J. Hoepman, and F. Garcia. A practical attack on the mifare classic. Smart Card Research and Advanced Applications, pages 267-282, 2008.
7. N. Desai. Increasing performance in high speed NIDs. A look at Snort's Internals, 2002.
8. S. Dharmapurikar, P. Krishnamurthy, T. S. Sproull, and J. W. Lockwood. Deep packet inspection using parallel bloom filters. Micro, IEEE, 24(1):52-61, 2004.
9. K. Finkenzeller. RFID handbook: fundamentals and applications in contactless smart cards, radio frequency identification and near-field communication. Wiley, 2010.
10. S. Gollakota, H. Hassanieh, B. Ransford, D. Katabi, and K. Fu. They can hear your heartbeats: non-invasive security for implantable medical devices. In Proceedings of SIGCOMM, 2011.
11. D. Halperin, T. Heydt-Benjamin, B. Ransford, S. Clark, B. Defend, W. Morgan, K. Fu, T. Kohno, and W. Maisel. Pacemakers and implantable cardiac defibrillators: Software radio attacks and zero-power defenses. In IEEE Symposium on Security and Privacy, pages 129-142. IEEE, 2008.
12. Y. Kuo, S. Verma, T. Schmid, and P. Dutta. Hijacking power and bandwidth from the mobile phone's audio interface. In Proceedings of the First ACM Symposium on Computing for Development, page 24. ACM, 2010.
13. R. Lemos. http://www.eweek.com/c/a/security/android-phone-hacked-by- researchers-via-nfc-843123/, June 2012.
14. H. Liu, S. Saroiu, A. Wolman, and H. Raj. Software abstractions for trusted sensors. In Proceedings of the 10th international conference on Mobile systems, Applications, and Services, pages 365-378. ACM, 2012.
15. McAfee Labs. http://www.mcafee.com/us/resources/reports/rp-threat- predictions-2013.pdf, Dec. 2012.
16. C. Miller. Exploring the NFC attack surface. In Proceedings of Blackhat, 2012.
17. M. Rieback, G. Gaydadjiev, B. Crispo, R. Hofman, and A. Tanenbaum. A platform for RFID security and privacy administration. In USENIX LISA, pages 89-102, 2006.
18. C. Shepard, A. Rahmati, C. Tossell, L. Zhong, and P. Kortum. Livelab: measuring wireless networks and smartphone users in the field. ACM SIGMETRICS Performance Evaluation Review, 38(3):15-20, 2011.
19. J. Sorber, M. Shin, R. Peterson, C. Cornelius, S. Mare, A. Prasad, Z. Marois, E. Smithayer, and D. Kotz. An amulet for trustworthy wearable mhealth. In Proceedings of the Twelfth Workshop on Mobile Computing Systems & Applications, page 7. ACM, 2012.
20. J. Sorber, M. Shin, R. Peterson, and D. Kotz. Plug-n-trust: practical trusted sensing for mhealth. In Proceedings of the 10th international conference on Mobile systems, Applications, and Services, pages 309-322. ACM, 2012.
21. viaForensics. https://viaforensics.com/mobile-security/forensics- security-analysis-google-wallet.html, Dec. 2011.