Exfiltrating data from Android devices. Issue 48 (February 2015)

• Record Type: Journal Article
• Authors: Do, Quang; Martini, Ben; Choo, Kim-Kwang Raymond
• Is Part Of: Computers & security. Issue 48(2015)
• Page Start: 74
• Page End: 91
• Publication Date: 2015-02
• Subjects: Android -- Code injection -- Covert exfiltration -- Data exfiltration -- Inaudible transmission -- Mobile adversary model -- Reverse engineering -- SMALI -- SMS transmission; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2014.10.016
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: Modern mobile devices have security capabilities built into the native operating system, which are generally designed to ensure the security of personal or corporate data stored on the device, both at rest and in transit. In recent times, there has been interest from researchers and governments in securing as well as exfiltrating data stored on such devices (e.g. the high profile PRISM program involving the US Government). In this paper, we propose an adversary model for Android covert data exfiltration, and demonstrate how it can be used to construct a mobile data exfiltration technique (MDET) to covertly exfiltrate data from Android devices. Two proof-of-concepts were implemented to demonstrate the feasibility of exfiltrating data via SMS and inaudible audio transmission using standard mobile devices. Graphical abstract: Highlights: Adversary model for Android covert data exfiltration. Mobile data exfiltration technique (MDET). Inaudible data exfiltration.