SLIDE 1
Talking Behind Your Back
Attacks & Countermeasures of Ultrasonic Cross-Device Tracking
Vasil ilio ios Mavroud udis is Doctoral Researcher UCL Federico ico Maggi Assistant Professor POLIMI Visiting Researcher UCSB
Who we are
Attacks & Countermeasures of Ultrasonic Cross-Device Tracking - - PowerPoint PPT Presentation
Attacks & Countermeasures of Ultrasonic Cross-Device Tracking - - PowerPoint PPT Presentation
Talking Behind Your Back Attacks & Countermeasures of Ultrasonic Cross-Device Tracking Federico ico Maggi Vasil ilio ios Mavroud udis is Assistant Professor POLIMI Doctoral Researcher UCL Visiting Researcher UCSB Who we are The
SLIDE 2
SLIDE 3
The Story of a Product
SLIDE 4
The Story of a Product
SLIDE 5
SLIDE 6
SLIDE 7
The Story of a Product
SLIDE 8
FTC Cross-Device Tracking Workshop, Nov 16, 2015 (Washington, DC)
SLIDE 9
The Story of a Product
SLIDE 10
Unhappy Proactive
SLIDE 11
Unhappy Unconcerned Proactive
SLIDE 12
The Story of a Product
SLIDE 13
SLIDE 14
The Story of a Product
SLIDE 15
Not the End of our Story: The Tip of the Iceberg
SLIDE 16
Contents
SLIDE 17
SLIDE 18
The Ultrasound Tracking Ecosystem
SLIDE 19
Cross-Device Tracking, XDT: Overview
XDT
SLIDE 20
Cross-Device Tracking, XDT: Details
SLIDE 21
Ultrasound Beacons: uBeacons
SLIDE 22
uBeacons: Technical Details
SLIDE 23
uBeacons: Practical Details
SLIDE 24
XDT + uBeacons = uXDT
SLIDE 25
Ultrasound Cross-Device Tracking
SLIDE 26
Ultrasound Cross-Device Tracking
SLIDE 27
Ultrasound Cross-Device Tracking
SLIDE 28
Ultrasound Cross-Device Tracking
SLIDE 29
Proximity Marketing
SLIDE 30
Other Use Cases
-
SLIDE 31
But how secure is this?
SLIDE 32
Exploitation!
-
SLIDE 33
Setting the Scene
SLIDE 34
SLIDE 35
The Attacker’s s Toolchest
SLIDE 36
The Attacker’s s Toolchest
SLIDE 37
The Tor de-anonymization Attack
SLIDE 38
The Tor de-anonymization Attack
SLIDE 39
The Demo Explained
-
-
SLIDE 40
The Demo: Simulated State-level Adversary
SLIDE 41
The Demo: Simulated State-level Adversary
SLIDE 42
Some More Attacks
SLIDE 43
SLIDE 44
Security Evaluation
SLIDE 45
Security Evaluation
SLIDE 46
Security Evaluation
SLIDE 47
Security Evaluation
SLIDE 48
Security Evaluation
SLIDE 49
May 10, 2016
SLIDE 50
Aug 31, 2016
SLIDE 51
July 19, 2016
SLIDE 52
Oct 17, 2016
SLIDE 53
Market Penetration
SLIDE 54
SLIDE 55
Countermeasures
SLIDE 56
Browser Extension
SLIDE 57
Android Permission
SLIDE 58
Tor Bug Tracker
SLIDE 59
Securing the Ecosystem
SLIDE 60
Securing the Ecosystem
SLIDE 61
SLIDE 62
Conclusions: What we did
SLIDE 63
Conclusions: What’s left to do!
-
SLIDE 64
Conclusions: What’s left to do!
-
-
SLIDE 65
Q & A
SLIDE 66
ubeacsec.org
SLIDE 67