arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1802.01468cs.CR
收藏

PinMe:追踪全球智能手机用户

PinMe: Tracking a Smartphone User around the World

Arsalan Mosenia, Xiaoliang Dai, Prateek Mittal, Niraj Jha

摘要:

随着智能手机的广泛使用,智能手机可以感知、收集和处理有关环境的有价值信息,确保位置隐私已成为现代最重要的问题之一。最近的一些研究讨论了处理智能手机收集的数据以定位手机所有者的可行性,即使用户不打算分享他的位置信息,例如,当全球定位系统(GPS)关闭时。先前的研究工作依赖于以下两个基本要求中的至少一个,这显著地限制了对手的能力:(i)攻击者必须准确地知道用户的初始位置或用户行进的路线集合,和/或(ii)攻击者必须测量一组特征,例如,设备的加速度,提前为潜在路线构建训练数据集。在本文中,我们证明了上述要求都是必不可少的损害用户的位置隐私。我们描述了PinMe,一种新颖的用户定位机制,利用存储在智能手机上的非感官/感官数据,例如,环境的气压,以及公共可用的辅助信息,例如,海拔地图,以估计用户的位置时,所有的位置服务,例如,GPS,关闭。

英文摘要:

With the pervasive use of smartphones that sense, collect, and process valuable information about the environment, ensuring location privacy has become one of the most important concerns in the modern age. A few recent research studies discuss the feasibility of processing data gathered by a smartphone to locate the phone's owner, even when the user does not intend to share his location information, e.g., when the Global Positioning System (GPS) is off. Previous research efforts rely on at least one of the two following fundamental requirements, which significantly limit the ability of the adversary: (i) the attacker must accurately know either the user's initial location or the set of routes through which the user travels and/or (ii) the attacker must measure a set of features, e.g., the device's acceleration, for potential routes in advance and construct a training dataset. In this paper, we demonstrate that neither of the above-mentioned requirements is essential for compromising the user's location privacy. We describe PinMe, a novel user-location mechanism that exploits non-sensory/sensory data stored on the smartphone, e.g., the environment's air pressure, along with publicly-available auxiliary information, e.g., elevation maps, to estimate the user's location when all location services, e.g., GPS, are turned off.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑