【作者】 陈晓宇；

【导师】 仲盛； 华景煜；

【作者基本信息】 南京大学 ， 计算机技术（专业学位）， 2019， 硕士

【摘要】 随着硬件技术的不断发展,智能手机、智能手表等智能设备上得以集中更多的高性能的硬件,这也使得攻击者通过智能设备上的各种高性能的硬件比如摄像头、传感器等等进一步盗取用户的隐私的问题越来越严重。在这些高性能硬件中,照相机是一个使用非常频繁并且非常常见的一个硬件,通过它,用户可以记录下生活中的点点滴滴,相应地,攻击者要是获得了用户智能设备上照相机的使用权,能够在用户不知情的情况下调用照相机进行拍照,也就能够盗取用户日常生活中的隐私信息,这就是本文所要探讨的静默拍照攻击。这种攻击具有非常大的危害性,并且由于其易于实现,衍生出了一系列的扩展攻击。前人的工作也描述了很多这样的扩展攻击,并且或多或少地都提到了一些针对静默拍照攻击的检测方式。而本文针对于Android系统上静默拍照攻击可以窃取的用户隐私问题,从隐私类型,隐私的重要程度方面进行了深入的分析和探讨,并给出了针对静默拍照攻击的检测方式。本文在前人的基础上,做出了如下的贡献:1.本文对2018年ApkPure应用市场上的32个应用类别下的16200个app进行了分析,对其中在使用过程中会引导用户打开照相机进行拍照的app中提取出引导用户打开照相机拍照时的关键性引导文本进行分析,从中分析出应用市场的app在引导用户拍照的时候,会要求用户拍取哪些类型的照片,而这些类型的照片正是攻击者通过静默拍照攻击可以获取的,从这些照片中,攻击者又可以分析出哪些用户的关键隐私信息,本文对这个问题进行了深入的分析;2.基于对静默拍照攻击窃取的用户隐私分析的结果,本文构造了一些现实场景下的针对性的攻击,比如用户地理位置监测、用户银行卡盗付等攻击,特别是通过结合静默拍照攻击和共享内存泄露攻击,对现在流行的二维码支付构造了一种攻击新型的二维码支付攻击,利用这种攻击,攻击者可以盗取用户在支付平台上的支付密码,甚至是登陆信息;3.本文针对静默拍照攻击的两个特点,一是无用户参与,二是预览框大小足够小,提出了一种新型的检测方式。通过静态分析apk代码,找出其中这两个关键处,如果满足特征,则是一个含有静默拍照攻击的恶意app,相比于前人的检测方式,本方式更为简便易行,并且更加具有普适性。更多还原

【Abstract】 With the continuous development of hardware technology,more high-performance hardware has been concentrated on smart devices such as smart phones and smart watches,which further enables attackers to steal the privacy of users by using such high-performance hardware such as cameras,sensors,etc.In these hardware,the camera is a very frequently used and very common hardware.Through it,users can record their life.So,if an attacker can gain the right to use the camera,he can steal much private information from user’s daily lives,this is the spy camera attack that this thesis will explore.This attack is very dangerous and due to its ease of implementation,a series of extended attacks has spawned.The work of the predecessors also describes many such extended attacks,and more or less mentioned some detection methods for spy camera attack.This thesis aims the spy camera attack on the Android platforms.We will discuss the type of privacy which spy camera attack can steal in depth and give a new method for detecting spy camera attack.Based on the former work,the contributions of this thesis are as follows:1.This thesis analyzes 16200 apps in 32 application categories on the 2018 ApkPure application market,and extracts the key texts from apps that actually guide the user to open the camera for taking photos during people using.We have analyzed these texts and known what kind of photos app will guide users to take.These types of photos are also can be obtained by attackers using spy camera attack.And what kind of private information,attackers can get from these pictures,this thesis will also answer this question.2.Based on the results of the analysis of user privacy obtained by spy camera attack,this thesis constructs some targeted attacks in real-life scenarios,such as user location monitoring,user bank card theft and other attacks,especially,this thesis constructs a new type of QR code payment attack for the popular QR code payment by combining spy camera attack and shared memory leak attack.With this attack,the attacker can steal the user’s payment password on the payment platform,even login information;3.This thesis proposes a new detection method for th e two characteristics of spy camera attack.First,no user participation.Second,the size of preview box is small enough.Through static analysis of the codes,we try to find out the two key points.If the feature is met,it is a malicious app with spy camera attack.Compared to the predecessors,this detection method is simpler and versatile.更多还原