Bypass cell-phone-verification through a smartphone-based botnet

NCU Institutional Repository > 資訊電機學院 > 資訊工程學系 > 期刊論文 > Item 987654321/106443

請使用永久網址來引用或連結此文件: https://ir.lib.ncu.edu.tw/handle/987654321/106443

題名:	Bypass cell-phone-verification through a smartphone-based botnet
作者:	許富皓;Hsu, Fu-Hau;Hsu, Chi-Hsien;Wang, Chuan-Sheng;Lee, Pei-Hsun;JIANG, RUEI-MIN;Jhang, Jia-Sian
貢獻者:	資訊電機學院資訊工程學系
關鍵詞:	Access control to computer data;Bypasses;Computer information security;Contact;Finishes;Smartphones;Trends;Web services
日期:	2015-01-01
上傳時間:	2026-04-23 13:22:44 (UTC+8)
出版者:	Institute of Information Science;社團法人中華民國計算語言學學會
摘要:	摘要： Due to the trend that more and more web services, such as Google, Facebook, and many auction websites, require users to open their new accounts or to login to their accounts through cell-phone-verification, cell-phone-verification has become an important function of cellular phones. However, our research shows that cell-phone-verification is not always reliable. This study proposes a new attack method named MAC-YURI (My ACcount, YoUr ResponsibIlity) against cell-phone-verification to show people one possible abuse of smartphones. Through MAC-YURI, an attacker can utilize a compromised smartphone as a steppingstone to accept and forward account verification code to finish cell-phone-verification when applying a new account or logging in to an account. We have implemented MAC-YURI on an Android smartphone. Experimental results show that MAC-YURI can successfully assist an attacker in obtaining the verification code of an account without the awareness of a steppingstone smartphone owner. Besides, MAC-YURI also develops an SMS-based mechanism to create a smartphone-based botnet. After such a botnet is created, it is difficult to locate the bot master or the machine a bot will contact in the future. Finally, this paper proposes some recommendations to protect a smartphone against MAC-YURI. 出版者：社團法人中華民國計算語言學學會出版日期： 2015-05-01 出處： Journal of Information Science and Engineering, 2015-05, Vol.31 (3), p.1097-1111 資源來源：華藝線上圖書館識別號： ISSN: 1016-2364 識別號： DOI: 10.6688/JISE.2015.31.3.18
顯示於類別:	[資訊工程學系] 期刊論文

文件中的檔案:

檔案	描述	大小	格式	瀏覽次數
index.html		0Kb	HTML	14	檢視/開啟

在NCUIR中所有的資料項目都受到原著作權保護.

社群 sharing

資料載入中.....