NDLI logo
  • Content
  • Similar Resources
  • Metadata
  • Cite This
  • Log-in
  • Fullscreen
Log-in
Do not have an account? Register Now
Forgot your password? Account recovery
  1. Proceedings of the 4th ACM Workshop on Security and Privacy in Smartphones & Mobile Devices (SPSM '14)
  2. Your Voice Assistant is Mine: How to Abuse Speakers to Steal Information and Control Your Phone
Loading...

Please wait, while we are loading the content...

Samsung KNOX and Enterprise Mobile Security
QR Inception: Barcode-in-Barcode Attacks
LazyTainter: Memory-Efficient Taint Tracking in Managed Runtimes
PIN Skimming: Exploiting the Ambient-Light Sensor in Mobile Devices
Efficient Smart Phone Forensics Based on Relevance Feedback
Analysis of Secure Key Storage Solutions on Android
A5: Automated Analysis of Adversarial Android Applications
Your Voice Assistant is Mine: How to Abuse Speakers to Steal Information and Control Your Phone
Cassandra: Towards a Certifying App Store for Android
Denial-of-App Attack: Inhibiting the Installation of Android Apps on Stock Phones
Stalking Beijing from Timbuktu: A Generic Measurement Approach for Exploiting Location-Based Social Discovery
OASIS: Operational Access Sandboxes for Information Security

Similar Documents

...
Your Voice Assistant is Mine: How to Abuse Speakers to Steal Information and Control Your Phone

Article

...
HOW SMART IS YOUR ANDROID SMARTPHONE? (2010)

...
How Your Phone Camera Can Be Used to Stealthily Spy on You: Transplantation Attacks against Android Camera Service

Article

...
Using AI to Attack VA: A Stealthy Spyware Against Voice Assistances in Smart Phones

Article

...
POSTER: biTheft: Stealing Your Secrets by Bidirectional Covert Channel Communication with Zero-Permission Android Application

Article

...
ANDROID UNTRUSTED DETECTION WITH PERMISSION BASED SCORING ANALYSIS

Article

...
Automatically securing permission-based software by reducing the attack surface: an application to Android

Article

...
Automatically securing permission-based software by reducing the attack surface: an application to Android

Article

...
Reducing attack surfaces for intra-application communication in android

Article

Your Voice Assistant is Mine: How to Abuse Speakers to Steal Information and Control Your Phone

Content Provider ACM Digital Library
Author Diao, Wenrui Zhou, Zhe Zhang, Kehuan Liu, Xiangyu
Abstract Previous research about sensor based attacks on Android platform focused mainly on accessing or controlling over sensitive components, such as camera, microphone and GPS. These approaches obtain data from sensors directly and need corresponding sensor invoking permissions. This paper presents a novel approach (GVS-Attack) to launch permission bypassing attacks from a zero-permission Android application (VoicEmployer) through the phone speaker. The idea of GVS-Attack is to utilize an Android system built-in voice assistant module -- Google Voice Search. With Android Intent mechanism, VoicEmployer can bring Google Voice Search to foreground, and then plays prepared audio files (like "call number 1234 5678") in the background. Google Voice Search can recognize this voice command and perform corresponding operations. With ingenious design, our GVS-Attack can forge SMS/Email, access privacy information, transmit sensitive data and achieve remote control without any permission. Moreover, we found a vulnerability of status checking in Google Search app, which can be utilized by GVS-Attack to dial arbitrary numbers even when the phone is securely locked with password. A prototype of VoicEmployer has been implemented to demonstrate the feasibility of GVS-Attack. In theory, nearly all Android (4.1+) devices equipped with Google Services Framework can be affected by GVS-Attack. This study may inspire application developers and researchers to rethink that zero permission doesn't mean safety and the speaker can be treated as a new attack surface.
Starting Page 63
Ending Page 74
Page Count 12
File Format PDF
ISBN 9781450331555
DOI 10.1145/2666620.2666623
Language English
Publisher Association for Computing Machinery (ACM)
Publisher Date 2014-11-07
Publisher Place New York
Access Restriction Subscribed
Subject Keyword Android security Voice assistant Permission bypassing Zero permission attack Speaker
Content Type Text
Resource Type Article
  • About
  • Disclaimer
  • Feedback
  • Sponsor
  • Contact
  • Chat with Us
About National Digital Library of India (NDLI)
NDLI logo

National Digital Library of India (NDLI) is a virtual repository of learning resources which is not just a repository with search/browse facilities but provides a host of services for the learner community. It is sponsored and mentored by Ministry of Education, Government of India, through its National Mission on Education through Information and Communication Technology (NMEICT). Filtered and federated searching is employed to facilitate focused searching so that learners can find the right resource with least effort and in minimum time. NDLI provides user group-specific services such as Examination Preparatory for School and College students and job aspirants. Services for Researchers and general learners are also provided. NDLI is designed to hold content of any language and provides interface support for 10 most widely used Indian languages. It is built to provide support for all academic levels including researchers and life-long learners, all disciplines, all popular forms of access devices and differently-abled learners. It is designed to enable people to learn and prepare from best practices from all over the world and to facilitate researchers to perform inter-linked exploration from multiple sources. It is developed, operated and maintained from Indian Institute of Technology Kharagpur.

Learn more about this project from here.

Disclaimer

NDLI is a conglomeration of freely available or institutionally contributed or donated or publisher managed contents. Almost all these contents are hosted and accessed from respective sources. The responsibility for authenticity, relevance, completeness, accuracy, reliability and suitability of these contents rests with the respective organization and NDLI has no responsibility or liability for these. Every effort is made to keep the NDLI portal up and running smoothly unless there are some unavoidable technical issues.

Feedback

Sponsor

Ministry of Education, through its National Mission on Education through Information and Communication Technology (NMEICT), has sponsored and funded the National Digital Library of India (NDLI) project.

Contact National Digital Library of India
Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302
See location in the Map
03222 282435
Mail: support@ndl.gov.in
Sl. Authority Responsibilities Communication Details
1 Ministry of Education (GoI),
Department of Higher Education
Sanctioning Authority https://www.education.gov.in/ict-initiatives
2 Indian Institute of Technology Kharagpur Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project https://www.iitkgp.ac.in
3 National Digital Library of India Office, Indian Institute of Technology Kharagpur The administrative and infrastructural headquarters of the project Dr. B. Sutradhar  bsutra@ndl.gov.in
4 Project PI / Joint PI Principal Investigator and Joint Principal Investigators of the project Dr. B. Sutradhar  bsutra@ndl.gov.in
Prof. Saswat Chakrabarti  will be added soon
5 Website/Portal (Helpdesk) Queries regarding NDLI and its services support@ndl.gov.in
6 Contents and Copyright Issues Queries related to content curation and copyright issues content@ndl.gov.in
7 National Digital Library of India Club (NDLI Club) Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach clubsupport@ndl.gov.in
8 Digital Preservation Centre (DPC) Assistance with digitizing and archiving copyright-free printed books dpc@ndl.gov.in
9 IDR Setup or Support Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops idr@ndl.gov.in
I will try my best to help you...
Cite this Content
Loading...