touch interface and keylogging malware - semantic scholar€¦ · touch interface and keylogging...

Touch Interface and Keylogging Malware IT Innovations 2015, Dubai, UAE Cybersecurity Research Laboratory Brigham Young University, Provo, Utah, USA

Upload: others

Post on 14-Jun-2020

10 views

Category:

Documents

0 download

Report

Download

Embed Size (px):

TRANSCRIPT

Touch Interface and Keylogging Malware

IT Innovations 2015, Dubai, UAE

Cybersecurity Research LaboratoryBrigham Young University, Provo, Utah, USA

Authors

Samuel Moses Jon Mercado Allie Larson Dale Rowe

Page 3: Touch Interface and Keylogging Malware - Semantic Scholar€¦ · Touch Interface and Keylogging Malware. IT Innovations 2015, Dubai, UAE. Cybersecurity Research Laboratory. Brigham

BYU Information Technology

•Cybersecurity Emphasis:•Penetration Testing•Cyber Forensics•Malware Analysis•Information Assurance

•Cybersecurity Research Laboratory•Cyber Physical Systems Security•IT Security Education•Big Data Analytics and Research•Situational Awareness

Page 4: Touch Interface and Keylogging Malware - Semantic Scholar€¦ · Touch Interface and Keylogging Malware. IT Innovations 2015, Dubai, UAE. Cybersecurity Research Laboratory. Brigham

Outline

• Intro• Threat of Keyloggers• Touch Screens and Smart Cities• Testing Methodology• Findings• Future Work• Conclusion

Page 5: Touch Interface and Keylogging Malware - Semantic Scholar€¦ · Touch Interface and Keylogging Malware. IT Innovations 2015, Dubai, UAE. Cybersecurity Research Laboratory. Brigham

Intro – What is a Keylogger?

• Hardware Keyloggers• Inserted between keyboard and USB port

• Software Keyloggers• Installed as programs that run in the background

Presenter

Presentation Notes

How Keyloggers work? Where the idea came from?

Page 6: Touch Interface and Keylogging Malware - Semantic Scholar€¦ · Touch Interface and Keylogging Malware. IT Innovations 2015, Dubai, UAE. Cybersecurity Research Laboratory. Brigham

Keyloggers - A Serious Threat

•In 2013 keyloggers played a role in 48% of total data breaches

•In 2014 keyloggers were one of the top 10 threats•2% of POS attacks•13% Crimeware attacks•38% of data breaches

Page 7: Touch Interface and Keylogging Malware - Semantic Scholar€¦ · Touch Interface and Keylogging Malware. IT Innovations 2015, Dubai, UAE. Cybersecurity Research Laboratory. Brigham

Touchscreens and Smart Cities

• Prevalence of Touchscreens increasing

• Critical Infrastructure , Public Transport, Information Kiosks

Presenter

Presentation Notes

Talk about potential Cascading Failures High Profile SCADA vulnerabilities reported Masdar City Data: Helathcare, Credit Card, PPI

Page 8: Touch Interface and Keylogging Malware - Semantic Scholar€¦ · Touch Interface and Keylogging Malware. IT Innovations 2015, Dubai, UAE. Cybersecurity Research Laboratory. Brigham

Testing Methodology

Tested Keystrokes:1234567890-=

~!@#$%^&*()_+

qwertyuiop[]\

QWERTYUIOP{}|

asdfghjkl;’

ASDFGHJKL:”

zxcvbnm,./

ZXCVBNM<>?

<ctrl>

The quick brown fox jumped over the lazy dog

The quick red<backspace><backspace><backspace>

Tested Keyloggers:•Actual Keylogger•Metasploit Javascript Keylogger•Free Keylogger•Meterpreter Keylogger•Spyrix Keylogger•KeyGrabber Physical Keylogger

Page 9: Touch Interface and Keylogging Malware - Semantic Scholar€¦ · Touch Interface and Keylogging Malware. IT Innovations 2015, Dubai, UAE. Cybersecurity Research Laboratory. Brigham

Touchscreen FindingsKeylogger 100% Keystroke

CoverageEnter &

Backspace Only0% Keystroke

CoverageActual Keylogger X

Metasploit JavascriptKeylogger

Free Keylogger X

Meterpreter Keylogger X

Spyrix Keylogger X

KeyGrabber Physical Keylogger

Page 10: Touch Interface and Keylogging Malware - Semantic Scholar€¦ · Touch Interface and Keylogging Malware. IT Innovations 2015, Dubai, UAE. Cybersecurity Research Laboratory. Brigham

Future Work

• Determining Risk to current and future systems• Review source code of keyloggers

• Most effective touchscreen keylogger attack vectors

• Securing Critical Infrastructure

Presenter

Presentation Notes

Planning for new technologies -how to stop it from getting there -how to monitor it being there -controls to practice security in depth

Page 11: Touch Interface and Keylogging Malware - Semantic Scholar€¦ · Touch Interface and Keylogging Malware. IT Innovations 2015, Dubai, UAE. Cybersecurity Research Laboratory. Brigham

Conclusion

• Keyloggers are still a threat today and are a threat to smart cities infrastructure

• Adjusting for these security vulnerabilities in the beginning stages of a smart city’s development will more effectively mitigate the risk

Page 12: Touch Interface and Keylogging Malware - Semantic Scholar€¦ · Touch Interface and Keylogging Malware. IT Innovations 2015, Dubai, UAE. Cybersecurity Research Laboratory. Brigham

Questions?• Contact us at [email protected]

• https://cybersecurity.byu.edu/research/keyloggers

mailto:[email protected]

https://cybersecurity.byu.edu/research/keyloggers

Intrusion Detection and Malware Analysis - Malware analysis · Intrusion Detection and Malware Analysis Malware analysis Pavel Laskov Wilhelm Schickard Institute for Computer Science

Malware and Anti-Malware Seminar by Benny Czarny

Best Anti KeyLogging CFA Defender presentation

Malware Analysis and Antivirus Technologies: Kernel Malware & A Look at Malware … · 2011-08-16 · Malware Analysis and Antivirus Technologies: Kernel Malware & A Look at Malware

Cyber Security Warning! #1 Threat Keylogging Malware

Evaluating Open Source Malware Sandboxes with Linux malware

An Introduction To Keyloggers, RATS And Malware€¦ · Malware Malware has been a problem for ages, Malware is short form of malicious software. A Malware is basically a program

Intrusion Detection and Malware Analysis - Malware collection134.2.173.140/lehre/ws10/ids-malware/12-malware-collection.pdf · Intrusion Detection and Malware Analysis Malware collection

MALWARES MALWARE REVIEWED ISE DE Malware Reviewed · MALWARES There are public reports about spreading of malware named as ServHelper malware. It is a backdoor malware used by attacker

1 Automated malware audit service Automatischer Malware Audit

Malware and anti-malware (fun with Trojans) - Z. …z.cliffe.schreuders.org/edu/FS/Malware and anti-malware... · 2014-04-02 · Malware and anti-malware (fun with Trojans) ... with

Windows Malware Firewall: Remove Windows Malware Firewall

Keylogging resistant visual authentication Protocols

Malware Analysis Analysis.pdf · Definisi Malware Analysis • What is a malware? • Malware (malicious software) ... Malware Sinkronisasi Token • Pelaku: Zeus Banking Trojan •

Malware - courses.cs.washington.edu · 2015. 5. 15. · Malware • Malicious’code’often’masquerades’as’good’ software’or’attaches’itself’to’good’software’

SoK: Keylogging Side Channels - GitHub Pages · 2020-03-12 · SoK: Keylogging Side Channels John V. Monaco U.S. Army Research Laboratory Aberdeen Proving Ground, MD, USA Abstract—The

Chapter 8 Malware - FTMS · – Boot virus – Logic Bomb virus – Directory virus – Resident virus. CSCA0101 Computing Basics 8 Malware Types of Malware ... Malware Types of Malware

Malware Nilgün Kablan. Malware …………………………………….…….……………………………………………… Geschichte der Malware ……………….…………………………………………………

Intrusion Detection and Malware Analysis - Malware collection

Listen Carefully - Acoustic Keylogging Using Machine Learning

Mobile Malware Network View - Black Hat · Mobile Malware Network View ... ... Windows Malware impacts mobile

Computer Virology and Mobile Malware Detection · 2019-03-14 · Outline •Introduction •Computer Virology • Malware taxonomy • Encrypted malware •Malware Detection •Mobile

Malware & Anti-Malware

[2010 CodeEngn Conference 04] window31 - Art of Keylogging 키보드보안과 관계없는 키로거들

Improving accuracy of malware detection by …...FFRI, Inc. Background – malware and its detection 4 Increasing malware Targeted Attack (Unknown malware) Malware generators Obfuscators

Malware Slums: Measurement and Analysis of Malware on ...homepage.cs.uiowa.edu/~mshafiq/files/malware... · Malware Slums: Measurement and Analysis of Malware on Trafﬁc Exchanges

Malware Fails Best Bugs in Malware Felix Leder [Malware ... · 1 Malware Fails Best Bugs in Malware Felix Leder [Malware Detection Team] [email protected] 5. desember 2011 malware

Reversing malware analysis trainingpart9 advanced malware analysis

Advanced malware analysis training session6 malware sandbox analysis

Malware, Malware y más Malware ¿Cómo me puedo proteger? “Dijo el cliente web”

01-Introduction - CYS5120 - Malware Analysis Bahcesehir ... · I Keystroke logging, often referred to as keylogging or keyboard capturing, is the action of recording (logging) the

Introduction to Mobile Malware. Outline ➢ Introduction ➢ Types of Malware ➢ Malware examples ➢ How Malware Spreads ➢ Prevention ➢ AndroRAT Hands-on Lab

SoK: Keylogging Side Channels - Vinnie Monaco Keylogging Side Channels.pdfSoK: Keylogging Side Channels John V. Monaco U.S. Army Research Laboratory Aberdeen Proving Ground, MD, USA

Metamorphic Malware 1 Metamorphic Malware Research

CORPORATE EDITION Panda Antivirus Macpandasecurity.s3.amazonaws.com/solutions/MacCorporateEdition/doc/... · Analiza incluso dispositivos iPhone, iPad y iPod touch en busca de malware