Inferno: Side-channel Attacks for Mobile Web Browsers

dc.creatorPhilipose, Manuelen
dc.creatorHalpern, Matthewen
dc.creatorLifshits, Pavelen
dc.creatorSilberstein, Marken
dc.creatorTiwari, Mohiten
dc.date.accessioned2015-04-24T20:30:08Zen
dc.date.available2015-04-24T20:30:08Zen
dc.date.issued2015en
dc.description.abstractWe demonstrate power consumption as a side-channel on mobile devices. While web pages may look aesthetically similar, the web browser exercises different behaviors while rendering the underlying code. The variance between the browser’s behavior and power consumption implies that different webpages consume different amounts of power. Thus, webpages can be uniquely identified from one another by analyzing power traces collected during a page load. While power channel attacks and defenses have been analyzed for fixed function units such as secure cryptoprocessors, this side- channel has not been studied for general-purpose systems such as mobile devices. In our evaluation, we use this side-channel to reveal a mobile user’s browsing activity from the hardware level with 80% accuracy. In addition, we attempt to develop countermeasures to combat this type of attack. We use two approaches to decrease information leakage: normalizing the computational workload to make a signal indistinguishable or increasing the amount of computational noise to make a signal incomparable. To do this, we altered DVFS (Dynamic Voltage and Frequency Scaling) to alter CPU frequency. We noticed that holding CPU frequency constant improved the accuracy of our machine learning classification. Thus, we developed a CPU governor that would change the frequency randomly. This defense managed to reduce the accuracy of the attack to 26%.en
dc.description.departmentElectrical and Computer Engineeringen
dc.identifier.urihttp://hdl.handle.net/2152/29583en
dc.language.isoengen
dc.subjectsecurityen
dc.subjectAndroiden
dc.subjectside-channelsen
dc.subjectpoweren
dc.subjectmobileen
dc.subjectdifferential power analysisen
dc.titleInferno: Side-channel Attacks for Mobile Web Browsersen
dc.typePosteren

Access full-text files

Original bundle

Now showing 1 - 2 of 2
Loading...
Thumbnail Image
Name:
Inferno_Poster_Final.pdf
Size:
1.24 MB
Format:
Adobe Portable Document Format
Description:
PDF version of poster
No Thumbnail Available
Name:
Inferno_Poster_Final.pptx
Size:
6.58 MB
Format:
Microsoft Powerpoint XML
Description:
PowerPoint version of poster

License bundle

Now showing 1 - 1 of 1
No Thumbnail Available
Name:
license.txt
Size:
1.66 KB
Format:
Item-specific license agreed upon to submission
Description:

Collections