MagThief

Hao Pan 1 , Lanqing Yang 1 , Honglu Li 1 , Chuang-Wen You 2 , Yi-Chao Chen 1 ,
Zhenxian Hu 1 , Guangtao Xue 1
Shanghai Jiao Tong University 1
National Taiwan University 2

Abstract

Various characteristics of mobile applications (apps) and associated in-app services have been used reveal potentiallysensitive user information; however, privacy concerns have prompted third-party apps to rigorously restrict access to data related to mobile app usage. This paper outlines a novel approach to the extraction of detailed app usage information based on analysis of the electromagnetic (EM) signals emitted from mobile devices when executing app-related tasks. Note that this type of EM leakage becomes high-complex when multiple apps are used simultaneously and is subject to interference from geomagnetic signals generated by device movement. This paper proposes a deep learning-based multi-label classification system to identify apps and in-app services based on magnetometer readings. The proposed MAGTHIEF system uses accelerometer and gyroscope data to cancel out the offset in geomagnetic signals followed by an elaborate deep region convolution neural network (DRCNN) to differentiate among multiple apps and the corresponding inapp services. Experiments on 50 apps demonstrated the efficacy of MAGTHIEF in identifying multiple apps and in-app services, achieving high average macro F1 scores of 0.87 and 0.95, respectively. MAGTHIEF also achieved time duration accuracy of 89.5% in recognizing app trajectory in the real-world scene


Publications

  1. Xiaoyu Ji, Yushi Cheng, Wenyuan Xu, Yuehan Chi, Hao Pan, Zhuangdi Zhu, Chuang-Wen You,  Yi-Chao Chen, and Lili Qiu. No Seeing is Also Believing: Electromagnetic-emission-based Application Guessing Attacks via Smartphones . TMC 2021.
  2. Hao Pan, Lanqing Yang, Honglu Li, Chuang-Wen You, Xiaoyu Ji,  Yi-Chao Chen, Zhenxian Hu, and Guangtao Xue. MagThief: Stealing Private App Usage Data on Mobile Devices via Built-in Magnetometer . IEEE SECON 2021.
    Slides
  3. Yushi Cheng, Xiaoyu Ji, Wenyuan Xu, Hao Pan, Zhuangdi Zhu, Chuang-Wen You,  Yi-Chao Chen, and Lili Qiu. MagAttack: Guessing Application Launching and Operation via Smartphone . ACM AsiaCCS 2019.
  4. Zhuangdi Zhu, Hao Pan,  Yi-Chao Chen, Xiaoyu Ji, Fan Zhang, and Chuang-Wen You. MagAttack: remote app sensing with your phone . ACM UbiComp/ISWC 2016.