Abstract:One rising trend in today's consumer electronics is the wearable devices, e.g., smartwatches. With tens of millions of smartwatches shipped, however, the security implications of such devices are not fully understood. Although previous studies have pointed out some privacy concerns about the data that can be collected, like personalized health information, the threat is considered low as the leaked data is not highly sensitive and there is no real attack implemented. In this paper we investigate a security problem coming from sensors in smartwatches, especially the accelerometer. The results show that the actual threat is much beyond people's awareness.Being worn on the wrist, the accelerometer built within a smartwatch can track user's hand movements, which makes inferring user inputs on keyboards possible in theory. But several challenges need to be addressed ahead in the real-world settings: e.g., small and irregular hand movements occur persistently during typing, which degrades the tracking accuracy and sometimes even overwhelms useful signals.In this paper, we present a new and practical side-channel attack to infer user inputs on keyboards by exploiting sensors in smartwatch. Novel keystroke inference models are developed to mitigate the negative impacts of tracking noises. We focus on two major categories of keyboards: one is numeric keypad that is generally used to input digits, and the other is QWERTY keyboard on which a user can type English text. Two prototypes have been built to infer users' banking PINs and English text when they type on POS terminal and QWERTY keyboard respectively. Our results show that for numeric keyboard, the probability of finding banking PINs in the top 3 candidates can reach 65%, while for QWERTY keyboard, a significant accuracy improvement is achieved compared to the previous works, especially of the success rate of finding the correct word in the top 10 candidates.

Keyboard acoustic side channel attacks: exploring realistic and security-sensitive scenarios

Key Listener: Inferring Keystrokes on QWERTY Keyboard of Touch Screen Through Acoustic Signals

Acoustic Side Channel Attack on Keyboards Based on Typing Patterns

GhostType: the Limits of Using Contactless Electromagnetic Interference to Inject Phantom Keys into Analog Circuits of Keyboards

Thermal (and Hybrid Thermal/Audio) Side-Channel Attacks on Keyboard Input

A Practical Deep Learning-Based Acoustic Side Channel Attack on Keyboards

Context-Free Attacks Using Keyboard Acoustic Emanations

A Survey on Acoustic Side Channel Attacks on Keyboards

Hard Drive of Hearing: Disks That Eavesdrop with a Synthesized Microphone

The Silent Manipulator: A Practical and Inaudible Backdoor Attack against Speech Recognition Systems

Behavioral Acoustic Emanations: Attack and Verification of PIN Entry Using Keypress Sounds

UltraBD: Backdoor Attack against Automatic Speaker Verification Systems via Adversarial Ultrasound

An Indirect Eavesdropping Attack of Keystrokes on Touch Screen through Acoustic Sensing

Mmear: Push the Limit of COTS Mmwave Eavesdropping on Headphones

VocalLock

Hearing your touch: A new acoustic side channel on smartphones

OverHear: Headphone based Multi-sensor Keystroke Inference

Thermanator: Thermal Residue-Based Post Factum Attacks On Keyboard Password Entry

When Good Becomes Evil: Keystroke Inference With Smartwatch

Biometric authentication via keystroke sound

Improving static audio keystroke analysis by score fusion of acoustic and timing data