Privacy Lunch – Wed, February 27, 2013 (11am)

Speaker: Prof. Apu Kapadia (Indiana University)

Title: PlaceRaider: Virtual Theft in Physical Spaces with Smartphones

As smartphones become more pervasive, a new strain of 'sensory malware'
has been developing that leverages sensors to steal information from
the physical environment. Our work introduces a new form of visual malware
called PlaceRaider, which allows remote attackers to engage in remote
reconnaissance and what we call 'virtual theft'. Through completely
opportunistic use of the camera on the phone and other sensors, PlaceRaider
constructs rich, three dimensional models of indoor environments. Remote
burglars can thus download the physical space, study the environment
carefully, and steal virtual objects from the environment (such as financial
documents, information on computer monitors, and personally identifiable
information). Through two human subject studies we demonstrate the
effectiveness of using mobile devices as powerful surveillance and virtual
theft platforms, and we suggest several possible defenses against visual
malware. I will also summarize results from our Exposure Project, which
focuses on the controlled sharing of sensed information to improve privacy.

Speaker Bio:
Prof. Apu Kapadia is an Assistant Professor at the School of Informatics
and Computing, Indiana University. He received his Ph.D. in Computer Science
from the University of Illinois at Urbana-Champaign (UIUC) in October 2005.
Following his PhD, Apu joined Dartmouth College as a Post-Doctoral Research
Fellow with the Institute for Security Technology Studies (ISTS), and then as
a Member of Technical Staff at MIT Lincoln Laboratory. Apu is particularly
interested in security and privacy as it relates to mobile and pervasive
computing, crowdsourcing, peer-to-peer networks, and accountable anonymity.
You can find more information about Apu Kapadia's projects at the IU Privacy
Lab homepage.

Privacy Lunch will be held at PARC