TL;DR
Snoopy demonstrates a deep learning-based system that can accurately infer smartwatch passwords by analyzing motion sensor data, highlighting security vulnerabilities in wearable devices.
Contribution
Introduces Snoopy, a novel deep neural network framework for extracting passwords from smartwatch motion data with high accuracy and robustness across users and device types.
Findings
Achieves 3-fold improvement over previous methods in password inference accuracy.
Can infer passwords within 20 attempts by eavesdropping on motion sensors.
Works effectively across different users and smartwatch models, even with crowd-sourced training data.
Abstract
Demand for smartwatches has taken off in recent years with new models which can run independently from smartphones and provide more useful features, becoming first-class mobile platforms. One can access online banking or even make payments on a smartwatch without a paired phone. This makes smartwatches more attractive and vulnerable to malicious attacks, which to date have been largely overlooked. In this paper, we demonstrate Snoopy, a password extraction and inference system which is able to accurately infer passwords entered on Android/Apple watches within 20 attempts, just by eavesdropping on motion sensors. Snoopy uses a uniform framework to extract the segments of motion data when passwords are entered, and uses novel deep neural networks to infer the actual passwords. We evaluate the proposed Snoopy system in the real-world with data from 362 participants and show that our system…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Code & Models
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
