Behavioral Acoustic Emanations: Attack and Verification of PIN Entry Using Keypress Sounds.

This paper explores the security vulnerability of Personal Identification Number (PIN) or numeric passwords. Entry Device (PEDs) that use small strings of data (PINs, keys or passwords) as means of verifying the legitimacy of a user. Today, PEDs are commonly used by personnel in different industrial and consumer electronic applications, such as entry at security checkpoints, ATMs and customer kiosks, etc. In this paper, we propose a side-channel attack on a 4-6 digit random PIN key, and a PIN key user verification method. The intervals between two keystrokes are extracted from the acoustic emanation and used as features to train machine-learning models. The attack model has a 60% chance to recover the PIN key. The verification model has an 88% accuracy on identifying the user. Our attack methods can perform key recovery by using the acoustic side-channel at low cost. As a countermeasure, our verification method can improve the security of PIN entry devices.

Evaluating the Implications of Varying Bluetooth Low Energy (BLE) Transmission Power Levels on Wireless Indoor Localization Accuracy and Precision.

Bluetooth Low Energy (BLE) based Wireless Indoor Localization System (WILS) with high localization accuracy and high localization precision is a key requirement in enabling the Internet of Things (IoT) in today's applications. In this paper, we investigated the effect of BLE signal variations on indoor localization caused by the change in BLE transmission power levels. This issue is not often discussed as most of the works on localization algorithms use the highest power levels but has important practical implications for energy efficiency, e.g., if a designer would like to trade-off localization performance and node lifetime. To analyze the impact, we used the established trilateration based localization model with two methods i.e., Centroid Approximation (CA) and Minimum Mean Square Error (MMSE). We observed that trilateration based localization with MMSE method outperforms the CA method. We further investigated the use of two filters i.e., Low Pass Filter (LPF) and Kalman Filter (KF) and evaluated their effects in terms of mitigating the random variations from BLE signal. In comparison to non-filter based approach, we observed a great improvement in localization accuracy and localization precision with a filter-based approach. Furthermore, in comparison to LPF based trilateration localization with CA, the performance of a KF based trilateration localization with MMSE is far better. An average of 1 m improvement in localization accuracy and approximately 50% improvement in localization precision is observed by using KF in trilateration based localization model with the MMSE method. In conclusion, with KF in trilateration based localization model with MMSE method effectively eliminates random variations in BLE RSS with multiple transmission power levels and thus results in a BLE based WILS with high accuracy and high precision.