LuxTrack: activity inference attacks via smartphone ambient light sensors and countermeasures

Seyedkazemi, Seyedpayam and Gursoy, M. Emre and Saygın, Yücel (2024) LuxTrack: activity inference attacks via smartphone ambient light sensors and countermeasures. IEEE Internet of Things Journal, 11 (17). pp. 28734-28751. ISSN 2327-4662

This is the latest version of this item.

Full text not available from this repository. (Request a copy)

Abstract

Ambient Light Sensors (ALS) are integrated into mobile devices to enable various functionalities such as automatic adjustment of screen brightness and background color. ALSs can be used to record the light intensity in the surrounding environment without requiring permission from the user; however, this ability raises novel privacy risks. In this paper, we propose LuxTrack, a side-channel privacy attack that uses the ALS of a smartphone to infer the user’s activity on a nearby laptop using the light emitted from the laptop screen. To demonstrate LuxTrack, we developed an Android app that records the light intensity data from the ALS of a mobile device, and used this app to create an ALS light intensity dataset in a controlled environment with real human subjects. From this dataset, LuxTrack extracts a total of 187 features under 6 categories and trains 6 different machine learning models for activity inference. Experiments show that LuxTrack can achieve up to 80% accuracy in inferring the sites/apps the user is viewing on their laptop. We then propose three countermeasures against LuxTrack: binning, smoothing, and noise addition. We demonstrate that while these countermeasures are effective in reducing attack accuracy, they also yield a reduction in the accuracy of legitimate tasks (e.g., adjusting screen background color). By conducting a trade-off analysis between attack accuracy and legitimate task accuracy, we show that the choice of the right countermeasure and parameters can enable the reduction of attack accuracy to below 30% while only incurring 3% loss in legitimate task accuracy.
Item Type: Article
Uncontrolled Keywords: Ambient light sensor; Feature extraction; Internet of Things; machine learning; mobile privacy; Portable computers; security; Sensors; side-channel attack; Task analysis; Temperature sensors; Videos
Divisions: Faculty of Engineering and Natural Sciences
Depositing User: Yücel Saygın
Date Deposited: 23 Sep 2024 13:16
Last Modified: 23 Sep 2024 13:16
URI: https://research.sabanciuniv.edu/id/eprint/50036

Available Versions of this Item

Actions (login required)

View Item
View Item