Publicação
Exploring USB connection vulnerabilities on Android devices breaches using the Android debug bridge
| Resumo: | The complexity of avoiding vulnerabilities in the modern mobile operating systems makes them vulnerable to many types of attacks. This paper presents preliminary work in the creation of scenarios to surreptitiously extract private data from smartphones running different versions of the Android Operating System. Three scenarios were already identified and a proof of concept script was developed, all based on the use of the Android Debug Bridge tool. When running in a computer, the script is able to extract private data from a USB connected smartphone. In two scenarios it was possible to extract the information in a totally surreptitious way, without the user knowledge. In the third scenario, using a newer version of the Android operating system, a user action is needed which makes the attack less likely to succeed, but still possible. |
|---|---|
| Autores principais: | Amarante, João |
| Outros Autores: | Barros, João |
| Assunto: | Vulnerability USB Smartphone Mobile device Computer security Physical attack Internet of things IoT Mobile cyber-physical systems Internet das coisas Dispositivos móveis Segurança |
| Ano: | 2017 |
| País: | Portugal |
| Tipo de documento: | comunicação em conferência |
| Tipo de acesso: | acesso aberto |
| Instituição associada: | Instituto Politécnico de Beja |
| Idioma: | inglês |
| Origem: | Repositório Institucional do IPBeja |
| Resumo: | The complexity of avoiding vulnerabilities in the modern mobile operating systems makes them vulnerable to many types of attacks. This paper presents preliminary work in the creation of scenarios to surreptitiously extract private data from smartphones running different versions of the Android Operating System. Three scenarios were already identified and a proof of concept script was developed, all based on the use of the Android Debug Bridge tool. When running in a computer, the script is able to extract private data from a USB connected smartphone. In two scenarios it was possible to extract the information in a totally surreptitious way, without the user knowledge. In the third scenario, using a newer version of the Android operating system, a user action is needed which makes the attack less likely to succeed, but still possible. |
|---|
Atividades financiadas
Não foram encontrados projetos financiados.