SLIDE 1 AccelPrint: Imperfections of Accelerometers Make Smartphones Trackable
Sanorita Dey, Nirupam Roy, Wenyuan Xu, Romit Roy Choudhury, Srihari Nelakuditi
SLIDE 2
People use hundreds of apps
SLIDE 3 Some apps are sneaky
- Exchanging IDs without consent is rampant
– IMEI (device id), IMSI (subscriber id), or ICC-ID (SIM card serial number) help track users
- One possible Solution: TaintDroid
– Realtime filtering of exchange of device IDs
SLIDE 4 Law: Get user’s consent
- While installing a cookie
- While sharing location
SLIDE 5
People use hundreds of apps
SLIDE 6
Our findings
Accelerometers have fingerprint Sensors can also potentially track the users
SLIDE 7
What if accelerometers have fingerprints?
SLIDE 8
What if accelerometers have fingerprints?
SLIDE 9
What if accelerometers have fingerprints?
SLIDE 10
Evidence of fingerprint
SLIDE 11 Toy Experimental Setup
…
Controlled, Identical Impetus
SLIDE 12
Toy Experimental Setup
…
SLIDE 13 Toy Experimental Setup
accelerometer chips
external vibration motor
vibration and collect accelerometer readings
SLIDE 14 Accelerometers are distinguishable
Accelerometer chips of Samsung Galaxy S3 Accelerometer chips of Nexus S Accelerometer chips of Samsung Galaxy Nexus
SLIDE 15 Accelerometers are distinguishable
Samsung S3 Samsung S3 Galaxy Nexus Galaxy Nexus Nexus S Nexus S
SLIDE 16 Accelerometers are distinguishable
Nexus s_1 Nexus s_2
SLIDE 17
Why are accelerometers distinct?
SLIDE 18
Accelerometers are based on MEMS
SLIDE 19
Internal structure of an accelerometer
SLIDE 20 Reasons for difference in accelerometers
imperfections
QFN and LGA Packaging
not alter the rated functionality
potentially introduce idiosyncrasies in data
SLIDE 21
Evaluation and External Impact Analysis
SLIDE 22 Larger Scale Exploration
107 stand-alone chips, smartphones and tablets in total
+
36 time domain and frequency domain features
80 stand-alone accelerometer chips 27 smartphones and tablets
Bagged Decision Trees for ensemble learning
(with accelerometer traces)
+
SLIDE 23 Feature Selection
Time domain features Frequency domain features
Extract 8 time and 10 frequency domain features from S(i) and I(i)
SLIDE 24
Overall classification performance
SLIDE 25 Overall classification performance
MPU 6050 ADXL 345 MMA 8452q Nexus One Samsung S3 MPU 6050
SLIDE 26 worst case precision & recall > 76% average precision & recall > 99%
Precision and Recall
SLIDE 27 Questions
- Is the external vibration mandatory for
fingerprinting the accelerometers?
- What is the impact of smartphone CPU load
- n fingerprints?
- Does the fingerprint manifest only at
faster sampling rates?
- Does the system need to be aware of the
surface on which device is placed?
SLIDE 28 Precision and Recall Without Vibration
worst case precision & recall > 66% average precision & recall > 88%
SLIDE 29 Natural Questions
- Is the external vibration mandatory for
fingerprinting the accelerometers?
- What is the impact of smartphone CPU load
- n fingerprints?
- Does the fingerprint manifest only at
faster sampling rates?
- Does the system need to be aware of the
surface on which device is placed?
SLIDE 30 Is the system sensitive to CPU load?
- CPU load matters. But up to 20% difference, high classification precision
SLIDE 31 Natural Questions
- Is the external vibration mandatory for
fingerprinting the accelerometers?
- What is the impact of smartphone CPU load
- n fingerprints?
- Does the fingerprint manifest only at
faster sampling rates?
- Does the system need to be aware of the
surface on which device is placed?
SLIDE 32 Does the fingerprint manifest only at faster sampling rates?
- Even at slower sampling rates, devices exhibit discriminating features
- Likelihood of distinguishing devices improves with faster sampling rates
SLIDE 33 Natural Questions
- Is the external vibration mandatory for
fingerprinting the accelerometers?
- What is the impact of smartphone CPU load
- n fingerprints?
- Does the fingerprint manifest only at
faster sampling rates?
- Does the system need to be aware of the
surface on which device is placed?
SLIDE 34 Does the system need to be aware of the surface on which device is placed?
- Training on different surfaces helps but the system is surface-agnostic
SLIDE 35 Conclusion and Future Work
- Accelerometers possess fingerprints
- Next step is commercial-grade evaluation
- How to scrub fingerprint from sensor data?
SLIDE 36
Two objects may be indistinguishable …
SLIDE 37
… but no two objects are identical
SLIDE 38 Thank You
http://web.engr.illinois.edu/~sdey4/