When CSI Meets Public WiFi

• DOI: 10.1145/2976749.2978397
• Publication Date: 2016-10-25T12:46:35Z
• Authors: Mengyuan Li; Yan Meng; Junyi Liu; Haojin Zhu; Xiaohui Liang; Yao Liu; Na Ruan
• Keywords: Keystroke logging; Channel state information; Installation

In this study, we present WindTalker, a novel and practical keystroke inference framework that allows an attacker to infer the sensitive keystrokes on mobile device through WiFi-based side-channel information. WindTalker is motivated from observation devices will lead different hand coverage finger motions, which introduce unique interference multi-path signals can be reflected by channel state information (CSI). The adversary exploit strong correlation between CSI fluctuation user's number input. presents approach collect target's data deploying public WiFi hotspot. Compared with previous approach, neither deploys external close target nor compromises device. Instead, it utilizes data, easy-to-deploy difficult-to-detect. addition, jointly analyzes traffic launch only for period where password entering occurs. launched without requirement of visually seeing smart phone input process, backside motion, or installing any malware tablet. We implemented Windtalker several phones performed detailed case study evaluate practicality towards Alipay, largest payment platform in world. evaluation results show recover key high successful rate.