International Conference on Network and System Security最新文献

Spying on the Spy: Security Analysis of Hidden Cameras 监视间谍:隐藏摄像机的安全分析

International Conference on Network and System Security Pub Date : 2023-06-01 DOI: 10.48550/arXiv.2306.00610

Samuel Herodotou, F. Hao

{"title":"Spying on the Spy: Security Analysis of Hidden Cameras","authors":"Samuel Herodotou, F. Hao","doi":"10.48550/arXiv.2306.00610","DOIUrl":"https://doi.org/10.48550/arXiv.2306.00610","url":null,"abstract":"Hidden cameras, also called spy cameras, are surveillance tools commonly used to spy on people without their knowledge. Whilst previous studies largely focused on investigating the detection of such a camera and the privacy implications, the security of the camera itself has received limited attention. Compared with ordinary IP cameras, spy cameras are normally sold in bulk at cheap prices and are ubiquitously deployed in hidden places within homes and workplaces. A security compromise of these cameras can have severe consequences. In this paper, we analyse a generic IP camera module, which has been packaged and re-branded for sale by several spy camera vendors. The module is controlled by mobile phone apps. By analysing the Android app and the traffic data, we reverse-engineered the security design of the whole system, including the module's Linux OS environment, the file structure, the authentication mechanism, the session management, and the communication with a remote server. Serious vulnerabilities have been identified in every component. Combined together, they allow an adversary to take complete control of a spy camera from anywhere over the Internet, enabling arbitrary code execution. This is possible even if the camera is behind a firewall. All that an adversary needs to launch an attack is the camera's serial number, which users sometimes unknowingly share in online reviews. We responsibly disclosed our findings to the manufacturer. Whilst the manufacturer acknowledged our work, they showed no intention to fix the problems. Patching or recalling the affected cameras is infeasible due to complexities in the supply chain. However, it is prudent to assume that bad actors have already been exploiting these flaws. We provide details of the identified vulnerabilities in order to raise public awareness, especially on the grave danger of disclosing a spy camera's serial number.","PeriodicalId":287438,"journal":{"name":"International Conference on Network and System Security","volume":"8 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129732670","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Driver Locations Harvesting Attack on pRide 司机位置收集攻击pRide

International Conference on Network and System Security Pub Date : 2022-10-24 DOI: 10.1007/978-3-031-23020-2_36

Shyam Murthy, S. Vivek

引用次数: 1

A Beyond-5G Authentication and Key Agreement Protocol A超5g认证与密钥协商协议

International Conference on Network and System Security Pub Date : 2022-07-13 DOI: 10.1007/978-3-031-23020-2_14

M. T. Damir, Tommi Meskanen, Sara Ramezanian, Valtteri Niemi

引用次数: 2

ppAURORA: Privacy Preserving Area Under Receiver Operating Characteristic and Precision-Recall Curves ppAURORA:接收机工作特性和查准率曲线下的隐私保护面积

International Conference on Network and System Security Pub Date : 2021-02-17 DOI: 10.1007/978-3-031-39828-5_15

Ali Burak Ünal, Nícolas Pfeifer, Mete Akgün

引用次数: 1

An Efficient Vulnerability Detection Model for Ethereum Smart Contracts 一种高效的以太坊智能合约漏洞检测模型

International Conference on Network and System Security Pub Date : 2019-12-15 DOI: 10.1007/978-3-030-36938-5_26

Jingjing Song, Haiwu He, Zhuo Lv, Chunhua Su, Guangquan Xu, Wei Wang

引用次数: 10

A Blockchain-Based IoT Data Management System for Secure and Scalable Data Sharing 基于区块链的物联网数据管理系统，实现安全和可扩展的数据共享

International Conference on Network and System Security Pub Date : 2019-12-15 DOI: 10.1007/978-3-030-36938-5_10

Yawei Wang, Chenxu Wang, Xiapu Luo, Kaixiang Zhang, Huizhong Li

引用次数: 1

Privacy-Preserving Sequential Data Publishing 保护隐私的顺序数据发布

International Conference on Network and System Security Pub Date : 2019-12-15 DOI: 10.1007/978-3-030-36938-5_37

Huili Wang, Wenping Ma, Haibin Zheng, Zhi Liang, Qianhong Wu

引用次数: 0

A Practical Dynamic Enhanced BFT Protocol 一种实用的动态增强BFT协议

International Conference on Network and System Security Pub Date : 2019-12-15 DOI: 10.1007/978-3-030-36938-5_17

Feng Shen, Yu Long, Z. Liu, Zhiqiang Liu, Hongyan Liu, Dawu Gu, Ning Liu

引用次数: 0

An Efficient Leakage-Resilient Authenticated Group Key Exchange Protocol 一种高效的防泄漏认证组密钥交换协议

International Conference on Network and System Security Pub Date : 2019-12-15 DOI: 10.1007/978-3-030-36938-5_41

Ou Ruan, Yang Yang, Mingwu Zhang

引用次数: 1

Pre-adjustment Based Anti-collusion Mechanism for Audio Signals 基于预调整的音频信号抗合谋机制

International Conference on Network and System Security Pub Date : 2019-12-15 DOI: 10.1007/978-3-030-36938-5_18

Juan Zhao, Tianrui Zong, Yong Xiang, Longxiang Gao, G. Beliakov

引用次数: 2