NDLI: MobiPot: Understanding Mobile Telephony Threats with Honeycards

Please wait, while we are loading the content...

Statistical Detection of Online Drifting Twitter Spam: Invited Paper

ORIGEN: Automatic Extraction of Offset-Revealing Instructions for Cross-Version Memory Analysis

Enabling Ciphertext Deduplication for Secure Cloud Storage and Access Control

FSSR: Fine-Grained EHRs Sharing via Similarity-Based Recommendation in Cloud-Assisted eHealthcare System

R-Droid: Leveraging Android App Analysis with Static Slice Optimization

Credential Wrapping: From Anonymous Password Authentication to Anonymous Biometric Authentication

Recipient Revocable Identity-Based Broadcast Encryption: How to Revoke Some Recipients in IBBE without Knowledge of the Plaintext

SecHOG: Privacy-Preserving Outsourcing Computation of Histogram of Oriented Gradients in the Cloud

NFPS: Adding Undetectable Secure Deletion to Flash Translation Layer

Mystique: Evolving Android Malware for Auditing Anti-Malware Tools

Vehicle Self-Surveillance: Sensor-Enabled Automatic Driver Recognition

Binary Analysis for Autonomous Hacking: Invited Abstract

The Request for Better Measurement: A Comparative Evaluation of Two-Factor Authentication Schemes

Secure Dynamic SSE via Access Indistinguishable Storage

Efficient Authenticated Multi-Pattern Matching

Model-based Security Testing: An Empirical Study on OAuth 2.0 Implementations

CDRep: Automatic Repair of Cryptographic Misuses in Android Applications

MAXS: Scaling Malware Execution with Sequential Multi-Hypothesis Testing

Privacy and Utility of Inference Control Mechanisms for Social Computing Applications

Generic Construction of Publicly Verifiable Predicate Encryption

Juggling the Gadgets: Binary-level Code Randomization using Instruction Displacement

Privacy-Preserving Spectral Analysis of Large Graphs in Public Clouds

Publicly Verifiable Secure Cloud Storage for Dynamic Data Using Secure Network Coding

UC-secure Two-Server Password-Based Authentication Protocol and Its Applications

Dealerless Corporate Key Generation for Identity-Based Encryption Schemes

Practical and Efficient Attribute-Based Encryption with Constant-Size Ciphertexts in Outsourced Verifiable Computation

Preventing Page Faults from Telling Your Secrets

StormDroid: A Streaminglized Machine Learning-Based System for Detecting Android Malware

Automated Dynamic Firmware Analysis at Scale: A Case Study on Embedded Web Interfaces

Homomorphic Linear Authentication Schemes from (ε)-Authentication Codes

Building an Encrypted, Distributed, and Searchable Key-value Store

Efficient Verifiable Computation of Linear and Quadratic Functions over Encrypted Data

Discovering Malicious Domains through Passive DNS Data Graph Analysis

MobiPot: Understanding Mobile Telephony Threats with Honeycards

Real-Time Detection of Malware Downloads via Large-Scale URL->File->Machine Graph Mining

Privacy Preserving Disease Treatment & Complication Prediction System (PDTCPS)

Novel Constructions of Cramer-Shoup Like Cryptosystems Based on Index Exchangeable Family

No-Execute-After-Read: Preventing Code Disclosure in Commodity Software

Efficient Multi-Function Data Sharing and Searching Mechanism for Cloud-Based Encrypted Data

Efficient Techniques for Publicly Verifiable Delegation of Computation

Client-CASH: Protecting Master Passwords against Offline Attacks

Anonymous Identity-Based Broadcast Encryption with Constant Decryption Complexity and Strong Security

Efficient Secure Outsourcing of Large-scale Quadratic Programs

Identifying and Utilizing Dependencies Across Cloud Security Services

FLEX: A Flexible Code Authentication Framework for Delegating Mobile App Customization

Distributed Detection of Single-Stage Multipoint Cyber Attacks in a Water Treatment Plant

Forgery-Resistant Touch-based Authentication on Mobile Devices

Anonymous Role-Based Access Control on E-Health Records

Efficient Privacy-Preserving Matrix Factorization via Fully Homomorphic Encryption: Extended Abstract

Half-Baked Cookies: Hardening Cookie-Based Authentication for the Modern Web

Checking Intent-based Communication in Android with Intent Space Analysis

Smartwatch-Based Keystroke Inference Attacks and Context-Aware Protection Mechanisms

Data Exfiltration in the Face of CSP

Efficient Construction of Completely Non-Malleable CCA Secure Public Key Encryption

ROPMEMU: A Framework for the Analysis of Complex Code-Reuse Attacks

Device-Enhanced Password Protocols with Optimal Online-Offline Protection

Password-Controlled Encryption with Accountable Break-Glass Access

Verifiable Outsourcing Algorithms for Modular Exponentiations with Improved Checkability

Hardening OpenStack Cloud Platforms against Compute Node Compromises

DroidDisintegrator: Intra-Application Information Flow Control in Android Apps

Smart Locks: Lessons for Securing Commodity Internet of Things Devices

Practical "Signatures with Efficient Protocols" from Simple Assumptions

Gait-Based Wi-Fi Signatures for Privacy-Preserving

Privacy Breach by Exploiting postMessage in HTML5: Identification, Evaluation, and Countermeasure

Attestation Transparency: Building secure Internet services for legacy clients

revDroid: Code Analysis of the Side Effects after Dynamic Permission Revocation of Android Apps

Leakage Fingerprints: A Non-negligible Vulnerability in Side-Channel Analysis

StemJail: Dynamic Role Compartmentalization

(Deterministic) Hierarchical Identity-based Encryption from Learning with Rounding over Small Modulus

Friend or Foe?: Your Wearable Devices Reveal Your Personal PIN

Anonymous Identity-Based Broadcast Encryption with Chosen-Ciphertext Security

Cross Processor Cache Attacks

Why MAC Address Randomization is not Enough: An Analysis of Wi-Fi Network Discovery Mechanisms

Bilateral-secure Signature by Key Evolving

Anonymous Identification for Ad Hoc Group

Fault Attacks on Efficient Pairing Implementations

CICADAS: Congesting the Internet with Coordinated and Decentralized Pulsating Attacks

Attacks and Defence on Android Free Floating Windows

Error Tolerance based Single Interesting Point Side Channel CPA Distinguisher

SkypeLine: Robust Hidden Data Transmission for VoIP

Generally Hybrid Proxy Re-Encryption: A Secure Data Sharing among Cryptographic Clouds

RamCrypt: Kernel-based Address Space Encryption for User-mode Processes

Your Credentials Are Compromised, Do Not Panic: You Can Be Well Protected

Inside Attack Filtering for Robust Sensor Localization

MobiPot: Understanding Mobile Telephony Threats with Honeycards

Content Provider	ACM Digital Library
Author	Gu, Lion Ahamad, Mustaque Gupta, Payas Balduzzi, Marco Gao, Debin
Abstract	Over the past decade, the number of mobile phones has increased dramatically, overtaking the world population in October 2014. In developing countries like India and China, mobile subscribers outnumber traditional landline users and account for over 90% of the active population. At the same time, convergence of telephony with the Internet with technologies like VoIP makes it possible to reach a large number of telephone users at a low or no cost via voice calls or SMS (short message service) messages. As a consequence, cybercriminals are abusing the telephony channel to launch attacks, e.g., scams that offer fraudulent services and voice-based phishing or vishing, that have previously relied on the Internet. In this paper, we introduce and deploy the first mobile phone honeypot called MobiPot that allow us to collect fraudulent calls and SMS messages. We implement multiple ways of advertising mobile numbers (honeycards) on MobiPot to investigate how fraudsters collect phone numbers that are targeted by them. During a period of over seven months, MobiPot collected over two thousand voice calls and SMS messages, and we confirmed that over half of them were unsolicited. We found that seeding honeycards enables us to discover attacks on the mobile phone numbers which were not known before.
Starting Page	723
Ending Page	734
Page Count	12
File Format	PDF
ISBN	9781450342339
DOI	10.1145/2897845.2897890
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2016-05-30
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Vishing Cybercrime Fraud Scam Security Mobile
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in