acm-header
Sign In

Communications of the ACM

ACM TechNews

Your Phone's Power ­se Can Give Hackers an Opening


View as: Print Mobile App Share:
A smartphone charging.

New research shows that even without data wires, hackers using a "side channel" can quickly find out what websites a user has visited while charging a device.

Credit: Shutterstock

Researchers at the New York Institute of Technology (NYIT) have shown even without a data cable, hackers can analyze a device's power needs to access users' private information, with speed and accuracy depending on several factors.

These side-channel attacks are successful because "Web pages have a signature that reflects the way they load and consume energy," according to NYIT professor Paolo Gasti.

The study involved using power use signatures previously identified and tested under various conditions. After collecting power traces via a range of smartphones browsing popular websites, the researchers launched attacks and checked the accuracy with which their algorithms could determine which sites were visited while the phones were plugged in.

Regardless of the conditions, the researchers determined even the slower and less accurate attempts at penetration were still accurate within six seconds about 50% of the time.

From New York Institute of Technology
View Full Article

 

Abstracts Copyright © 2017 Information Inc., Bethesda, Maryland, USA


 

No entries found

Sign In for Full Access
» Forgot Password? » Create an ACM Web Account