Acoustic fingerprinting revisited: Generate stable device ID stealthily with inaudible sound

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2014, Pages 429-440

  Zhou, Zhe ^a   Diao, Wenrui ^a   Liu, Xiangyu ^a   Zhang, Kehuan ^a  

^a CHINESE UNIVERSITY OF HONG KONG   (Hong Kong)

Author keywords

Acoustic fingerprint; Device fingerprint; Smartphone

Indexed keywords

AUDIO ACOUSTICS; FREQUENCY RESPONSE; PERSONAL COMPUTING;

ACOUSTIC FINGERPRINT; AUDIO FREQUENCIES; DEVICE FINGERPRINT; HARDWARE FEATURES; MANUFACTURING PROCESS; NONLINEAR EFFECT; PRACTICAL METHOD; PRIVATE INFORMATION;

SMARTPHONES;

EID: 84910638147     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2660267.2660300     Document Type: Conference Paper

References (45)

1. Android 4.4 blocked some SD card accessing. http://lifehacker.com/android-kitkatblocks-some-access-to-micro-sd-cards-1524997895.
2. Anonymity, Privacy, and Security Online. http://www.pewinternet.org/2013/09/05/anonymity-privacy-and-security-online/.
3. Apple set deadline for UDID. http://www.engadget.com/2013/03/21/apple-sets-a-may-1st-cutoff-for-appsubmissions-that-use-udid/.
4. F-secure Mobile Treat Report. https://www.f-secure.com/static/doc/labs-global/Research/Mobile-Threat-Report-Q1-2013.pdf.
5. Frequency response of 3 speakers. http://community. edmdistrict.com/showthread.php?7944-Beats-Studios-doesn-t-sound-right.
6. Google may stop tracking user by cookie. http: //www.usatoday.com/story/tech/2013/09/17/google-cookies-advertising/2823183/.
7. iBeacon. http://en.wikipedia.org/wiki/IBeacon.
8. IDC Worldwide Smartphone Shipments. https://www.idc.com/getdoc.jsp?containerId=prUS24645514.
9. Spread spectrum. http: //en.wikipedia.org/wiki/Spread-spectrum.
10. UIUC Physics 406 Acoustical Physics of Music. http://courses.physics.illinois.edu/phys406/Lecture-Notes/P406POM-Lecture-Notes/P406POM-Lect5.pdf.
11. UUID of Android. http://developer.android.com/reference/java/util/UUID.html.
12. Wifi Positioning System. http://en.wikipedia.org/wiki/Wi-Fi-positioning-system.
13. C. Arackaparambil, S. Bratus, A. Shubina, and D. Kotz. On the reliability of wireless fingerprinting using clock skews. In Proceedings of the third ACM conference on Wireless network security, pages 169-174. ACM, 2010.
14. K. Boda, Á. M. Földes, G. G. Gulyás, and S. Imre. User tracking on the web via cross-browser fingerprinting. In Information Security Technology for Applications, pages 31-46. Springer, 2012.
15. K. Bonne Rasmussen and S. Capkun. Implications of radio fingerprinting on the security of sensor networks. In Security and Privacy in Communications Networks and the Workshops, 2007. SecureComm 2007. Third International Conference on, pages 331-340. IEEE, 2007.
16. A. Boxall. Smartphone kill switch bill passes in california. http://www.digitaltrends.com/mobile/smartphone-kill-switch-bill-passes-incalifornia/, May 2014.
17. V. Brik, S. Banerjee, M. Gruteser, and S. Oh. Wireless device identification with radiometric signatures. In Proceedings of the 14th ACM international conference on Mobile computing and networking, pages 116-127. ACM, 2008.
18. S. Brown. Linear and Nonlinear Loudspeaker Characterization. PhD thesis, WORCESTER POLYTECHNIC INSTITUTE, 2006.
19. A. Das, N. Borisov, and M. Caesar. Fingerprinting smart devices through embedded acoustic components. arXiv preprint arXiv:1403.3366, 2014.
20. L. C. C. Desmond, C. C. Yuan, T. C. Pheng, and R. S. Lee. Identifying unique devices through wireless fingerprinting. In Proceedings of the first ACM conference on Wireless network security, pages 46-55. ACM, 2008.
21. S. Dey, N. Roy, W. Xu, R. R. Choudhury, and S. Nelakuditi. Accelprint: Imperfections of accelerometers make smartphones trackable. In Proceedings of the 20th Annual Network and Distributed System Security Symposium (Feb 2014), NDSS, volume 14, 2014.
22. P. Eckersley. How unique is your web browser? In Privacy Enhancing Technologies, pages 1-18. Springer, 2010.
23. J. Franklin, D. McCoy, P. Tabriz, V. Neagoe, J. V. Randwyk, and D. Sicker. Passive data link layer 802.11 wireless device driver fingerprinting. In Proc. 15th USENIX Security Symposium, pages 167-178, 2006.
24. A. Gionis, P. Indyk, R. Motwani, et al. Similarity search in high dimensions via hashing. In VLDB, volume 99, pages 518-529, 1999.
25. L. G. Greenwald and T. J. Thomas. Toward undetected operating system fingerprinting. In Proceedings of the first USENIX workshop on Offensive Technologies, pages 1-10. USENIX Association, 2007.
26. L. G. Greenwald and T. J. Thomas. Understanding and preventing network device fingerprinting. Bell Labs Technical Journal, 12(3):149-166, 2007.
27. J. Han, E. Owusu, L. T. Nguyen, A. Perrig, and J. Zhang. Accomplice: Location inference using accelerometers on smartphones. In Communication Systems and Networks (COMSNETS), 2012 Fourth International Conference on, pages 1-9. IEEE, 2012.
28. B. Krishnamurthy and C. Wills. Privacy diffusion on the web: a longitudinal perspective. In Proceedings of the 18th international conference on World wide web, pages 541-550. ACM, 2009.
29. B. Krishnamurthy and C. E. Wills. Generating a privacy footprint on the internet. In Proceedings of the 6th ACM SIGCOMM conference on Internet measurement, pages 65-70. ACM, 2006.
30. J. Lester, B. Hannaford, and G. Borriello. "are you with me?"-using accelerometers to determine if two devices are carried by the same person. In Pervasive, pages 33-50, 2004.
31. J. Lukas, J. Fridrich, and M. Goljan. Digital camera identification from sensor pattern noise. Information Forensics and Security, IEEE Transactions on, 1(2):205-214, 2006.
32. J. R. Mayer and J. C. Mitchell. Third-party web tracking: Policy and technology. In Security and Privacy (SP), 2012 IEEE Symposium on, pages 413-427. IEEE, 2012.
33. K. Mowery, D. Bogenreif, S. Yilek, and H. Shacham. Fingerprinting information in javascript implementations. In Proceedings of Web, volume 2, 2011.
34. L. T. Nguyen and Y. Zhang. Probabilistic infrastructureless positioning in the pocket. In Mobile Computing, Applications, and Services, pages 311-330. Springer, 2012.
35. N. Nikiforakis, A. Kapravelos, W. Joosen, C. Kruegel, F. Piessens, and G. Vigna. Cookieless monster: Exploring the ecosystem of web-based device fingerprinting. In Security and Privacy (SP), 2013 IEEE Symposium on, pages 541-555. IEEE, 2013.
36. F. Roesner. Detecung and defending against third-party tracking on the web. 2012.
37. M. Slaney and M. Casey. Locality-sensitive hashing for finding nearest neighbors [lecture notes]. Signal Processing Magazine IEEE, 25(2):128-131, 2008.
38. M. Smart, G. R. Malan, and F. Jahanian. Defeating tcp/ip stack fingerprinting. In Proceedings of the 9th USENIX Security Symposium, volume 6, 2000.
39. A. Soltani, S. Canty, Q. Mayo, L. Thomas, and C. J. Hoofnagle. Flash cookies and privacy. In AAAI Spring Symposium: Intelligent Information Privacy Management, 2010.
40. K. Takeda. User identification and tracking with online device fingerprints fusion. In Security Technology (ICCST), 2012 IEEE International Carnahan Conference on, pages 163-167. IEEE, 2012.
41. V. Toubiana, A. Narayanan, D. Boneh, H. Nissenbaum, and S. Barocas. Adnostic: Privacy preserving targeted advertising. In NDSS, 2010.
42. O. Ureten and N. Serinken. Wireless security through rf fingerprinting. Electrical and Computer Engineering, Canadian Journal of, 32(1):27-33, 2007.
43. T.-E. Wei, A. B. Jeng, H.-M. Lee, C.-H. Chen, and C.-W. Tien. Android privacy. In Machine Learning and Cybernetics (ICMLC), 2012 International Conference on, volume 5, pages 1830-1837. IEEE, 2012.
44. P. N. Yianilos. Data structures and algorithms for nearest neighbor search in general metric spaces. In Proceedings of the fourth annual ACM-SIAM Symposium on Discrete algorithms, pages 311-321. Society for Industrial and Applied Mathematics, 1993.
45. X. Zhou, S. Demetriou, D. He, M. Naveed, X. Pan, X. Wang, C. A. Gunter, and K. Nahrstedt. Identity, location, disease and more: inferring your secrets from android public resources. In Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security, pages 1017-1028. ACM, 2013.