A look into the information your smartphone leaks

Abstract

Some smartphone applications (apps) pose a risk to users’ personal information. Events of apps leaking information stored in smartphones illustrate the danger that they present. In this paper, we investigate the amount of personal information leaked during the installation and use of apps when accessing the Internet. We have opted for the implementation of a Man-in-the-Middle proxy to intercept the network traffic generated by 20 popular free apps installed on different smartphones of distinctive vendors. This work describes the technical considerations and requirements for the deployment of the monitoring WiFi network employed during the conducted experiments. The presented results show that numerous mobile and personal unique identifiers, along with personal information are leaked by several of the evaluated apps, commonly during the installation process.

Description

The file attached to this record is the author's final peer reviewed version. The Publisher's final version can be found by following the DOI link.

Keywords

Information Leaking, Mallory Proxy, Man-in-the-Middle Attack, mitmproxy, Mobile Apps, Smartphone Security, WiFi Networks

Citation

Chadza, T., Aparico-Navarro, F.J., Kyriakopoulos, K., Chambers, J.A. (2017) A look into the information your smartphone leaks. Proceedings of 2017 International Symposium on Networks, Computers and Communications (ISNCC), Marrakech, Morocco, May 2017.

Rights

Research Institute