Fingerprint attack against touch-enabled devices

Security and Privacy in Smartphones and Mobile Devices Pub Date : 2012-10-19 DOI:10.1145/2381934.2381947

Yang Zhang, Peng Xia, Junzhou Luo, Z. Ling, Benyuan Liu, Xinwen Fu

{"title":"Fingerprint attack against touch-enabled devices","authors":"Yang Zhang, Peng Xia, Junzhou Luo, Z. Ling, Benyuan Liu, Xinwen Fu","doi":"10.1145/2381934.2381947","DOIUrl":null,"url":null,"abstract":"Oily residues left by tapping fingers on a touch screen may breach user privacy. In this paper, we introduce the fingerprint attack against touch-enabled devices. We dust the touch screen surface to reveal fingerprints, and use an iPhone camera to carefully photograph fingerprints while striving to remove the virtual image of the phone from the fingerprint image. We then sharpen the fingerprints in an image via various image processing techniques and design effective algorithms to automatically map fingerprints to a keypad in order to infer tapped passwords. Extensive experiments were conducted on iPad, iPhone and Android phone and the results show that the fingerprint attack is effective and efficient in inferring passwords from fingerprint images. To the best of our knowledge, we are the first using fingerprint powder on touch screen and inferring passwords from fingerprints. Video at http://www.youtube.com/watch?v=vRUbJIcV9vg shows the dusting process on iPhone and video at http://www.youtube.com/watch?v=6jS6KroER3Y shows the dusting process on iPad. After dusting, password characters for login are clearly disclosed.","PeriodicalId":213305,"journal":{"name":"Security and Privacy in Smartphones and Mobile Devices","volume":"36 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2012-10-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"74","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Security and Privacy in Smartphones and Mobile Devices","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1145/2381934.2381947","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}

引用次数: 74

Abstract

Oily residues left by tapping fingers on a touch screen may breach user privacy. In this paper, we introduce the fingerprint attack against touch-enabled devices. We dust the touch screen surface to reveal fingerprints, and use an iPhone camera to carefully photograph fingerprints while striving to remove the virtual image of the phone from the fingerprint image. We then sharpen the fingerprints in an image via various image processing techniques and design effective algorithms to automatically map fingerprints to a keypad in order to infer tapped passwords. Extensive experiments were conducted on iPad, iPhone and Android phone and the results show that the fingerprint attack is effective and efficient in inferring passwords from fingerprint images. To the best of our knowledge, we are the first using fingerprint powder on touch screen and inferring passwords from fingerprints. Video at http://www.youtube.com/watch?v=vRUbJIcV9vg shows the dusting process on iPhone and video at http://www.youtube.com/watch?v=6jS6KroER3Y shows the dusting process on iPad. After dusting, password characters for login are clearly disclosed.

查看原文本刊更多论文

针对触控设备的指纹攻击

手指在触摸屏上轻敲留下的油渍可能会侵犯用户隐私。本文介绍了针对触控设备的指纹攻击。我们掸去触摸屏表面的灰尘，露出指纹，并使用iPhone相机仔细拍摄指纹，同时努力从指纹图像中去除手机的虚拟图像。然后，我们通过各种图像处理技术锐化图像中的指纹，并设计有效的算法将指纹自动映射到键盘上，以推断被窃听的密码。在iPad、iPhone和Android手机上进行了大量的实验，结果表明指纹攻击从指纹图像中推断密码是有效和高效的。据我们所知，我们是第一个在触摸屏上使用指纹粉并根据指纹推断密码的人。在http://www.youtube.com/watch?v=vRUbJIcV9vg上可以看到iPhone上的除尘过程，在http://www.youtube.com/watch?v=6jS6KroER3Y上可以看到iPad上的除尘过程。除尘后，登录密码字符清晰显示。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文求助全文

来源期刊

Security and Privacy in Smartphones and Mobile Devices

自引率

0.00%

发文量