• Embed Doc
  • Copy Link
  • Readcast
  • Collections
  • CommentGo Back
Download
 
 
www.smobilesystems.com • 4320 E. 5th Avenue · Columbus, OH 43219 · tel: +1.866.323.0480 · fax: +1.614.251.4083
Page 1
SMobile Global Threat Center
Study of MITM Attacks Against Smartphone Devices
Mayank 
 
 Aggarwal,
 
GTC
 
Research
 
Engineer
 
Troy
 
Vennon,
 
GTC
 
Research
 
Engineer
 
Oct 
 
22,
 
2009
 
 
 
www.smobilesystems.com • 4320 E. 5th Avenue · Columbus, OH 43219 · tel: +1.866.323.0480 · fax: +1.614.251.4083
Page 2
TABLE
 
OF
 
CONTENTS
 
ABSTRACT ............................................................................................................................................................................ 3INTRODUCTION ................................................................................................................................................................. 4Man in the Middle Attack (MITM) ......................................................................................................................... 4TOOLS ..................................................................................................................................................................................... 5MITM ATTACK IMPLEMENTATION......................................................................................................................... 5RESULTS ................................................................................................................................................................................ 7Nokia N95. ....................................................................................................................................................................... 7Windows HTC tilt ......................................................................................................................................................... 9Android G1 .................................................................................................................................................................... 11Apple iPhone 3G S ...................................................................................................................................................... 12CONCLUSION ..................................................................................................................................................................... 13REFERENCES ..................................................................................................................................................................... 14
 
 
www.smobilesystems.com • 4320 E. 5th Avenue · Columbus, OH 43219 · tel: +1.866.323.0480 · fax: +1.614.251.4083
Page 3
 ABSTRACT
 
According to a survey conducted by a mobile advertising researcher, AdMob, smartphone usersare driving up the use of Wi‐Fi hotspots. The result of the survey indicates that there were 550million smartphone Wi‐Fi requests in Western Europe alone in 2008, a 132% increase for theyear. AdMob said that 42% of the requests from iPhones originated from Wi‐Fi hotspots [1]. Inthe United States, AT&T reported a 41% increase for the year in iPhone connections, alone, at wireless hotspots [2]. In a new report, the market research firm Yankee group [3] has forecast  that the number of smartphone users will quadruple to 160 million by the year 2013. In anotherreport released by ABI Research, Wi‐Fi smartphone sales will double by 2011 [4]. ABI Researchalso found that 74% of people who have Wi‐Fi enabled smartphone’s use the technology and77% say they want a Wi‐Fi enabled handset when they make their next purchase [5].To summarize, we can foresee a huge growth in Wi‐Fi enabled smartphone’s in the future. Theimportant question to ask is whether the general public understands the security risksassociated with using a smartphone device in an unencrypted wireless hotspot. As an end user,can they be certain that there is no security threat to their privacy and data when conductingpersonal or corporate business from their smartphone, over a wireless network? In a publishedarticle, Dan Hoffman describes how a computer can passively listen on a wireless network anduse the information to perform a man‐in‐the‐middle (MITM) attack to gain access to personal orfinancial information. [6]. It is widely known that MITM attacks are a viable attack vector whenconsidering necessary precautions related to operating PC's in a wireless network environment.The remaining question is whether the same types of precautions can be considered whenutilizing smartphone devices to perform similar tasks from the palm of your hand.
of 00

Leave a Comment

You must be to leave a comment.
Submit
Characters: ...
You must be to leave a comment.
Submit
Characters: ...