Title: In-Memory Credentials Robbery on Android Phones
Citation: 2013 World Congress on Internet Security (WorldCIS) p. 88-93
Publisher: IEEE
Publication Year: 2013
JRC N°: JRC83647
ISBN: 978-1-908320-22-3
URI: http://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=6751023
http://ieeexplore.ieee.org/xpl/mostRecentIssue.jsp?punumber=6745499 (proceedings)
DOI: 10.1109/WorldCIS.2013.6751023
Type: Articles in periodicals and books
Abstract: Mobile phones have almost replaced the work of traditional computers and people nowadays use them for both business and personal purposes, in a much more complex way than some years ago. However, the notion of “mobile phone” has not changed accordingly: the majority of the people consider this device as a phone without thinking the implications of their digital life when using it. In this paper we demonstrate how to steal user’s credentials and sensitive information in general from the memory of an Android device. We do so by using the findings of our previous work, named MobiLeak Project, and by exploiting vulnerabilities due to both the user behavior and the poor practices when developing mobile applications. Finally, and most importantly, we show that this attack is not noticed by the mobile phone user both in terms of visibility and mobile phone performance.
JRC Directorate:Space, Security and Migration

Files in This Item:
There are no files associated with this item.

Items in repository are protected by copyright, with all rights reserved, unless otherwise indicated.