Exploring USB Connection Vulnerabilities on Android Devices - Breaches using the Android Debug Bridge

João Amarante, João Paulo Barros

2017

Abstract

The complexity of avoiding vulnerabilities in the modern mobile operating systems makes them vulnerable to many types of attacks. This paper presents preliminary work in the creation of scenarios to surreptitiously extract private data from smartphones running different versions of the Android Operating System. Three scenarios were already identified and a proof of concept script was developed, all based on the use of the Android Debug Bridge tool. When running in a computer, the script is able to extract private data from a USB connected smartphone. In two scenarios it was possible to extract the information in a totally surreptitious way, without the user knowledge. In the third scenario, using a newer version of the Android operating system, a user action is needed which makes the attack less likely to succeed, but still possible.

Paper Citation

in Harvard Style

Amarante J. and Barros J. (2017). Exploring USB Connection Vulnerabilities on Android Devices - Breaches using the Android Debug Bridge . In Proceedings of the 14th International Joint Conference on e-Business and Telecommunications - Volume 6: SECRYPT, (ICETE 2017) ISBN 978-989-758-259-2, pages 572-577. DOI: 10.5220/0006475905720577

in Bibtex Style

@conference{secrypt17,
author={João Amarante and João Paulo Barros},
title={Exploring USB Connection Vulnerabilities on Android Devices - Breaches using the Android Debug Bridge},
booktitle={Proceedings of the 14th International Joint Conference on e-Business and Telecommunications - Volume 6: SECRYPT, (ICETE 2017)},
year={2017},
pages={572-577},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0006475905720577},
isbn={978-989-758-259-2},
}

in EndNote Style

TY - CONF
JO - Proceedings of the 14th International Joint Conference on e-Business and Telecommunications - Volume 6: SECRYPT, (ICETE 2017)
TI - Exploring USB Connection Vulnerabilities on Android Devices - Breaches using the Android Debug Bridge
SN - 978-989-758-259-2
AU - Amarante J.
AU - Barros J.
PY - 2017
SP - 572
EP - 577
DO - 10.5220/0006475905720577