Smartphone Security and Privacy: A Survey on APTs, Sensor-Based Attacks, Side-Channel Attacks, Google Play Attacks, and Defenses

Abstract

There is an exponential rise in the use of smartphones in government and private institutions due to business dependencies such as communication, virtual meetings, and access to global information. These smartphones are an attractive target for cybercriminals and are one of the leading causes of cyber espionage and sabotage. A large number of sophisticated malware attacks as well as advanced persistent threats (APTs) have been launched on smartphone users. These attacks are becoming significantly more complex, sophisticated, persistent, and undetected for extended periods. Traditionally, devices are targeted by exploiting a vulnerability in the operating system (OS) or device sensors. Nevertheless, there is a rise in APTs, side-channel attacks, sensor-based attacks, and attacks launched through the Google Play Store. Previous research contributions have lacked contemporary threats, and some have proven ineffective against the latest variants of the mobile operating system. In this paper, we conducted an extensive survey of papers over the last 15 years (2009–2023), covering vulnerabilities, contemporary threats, and corresponding defenses. The research highlights APTs, classifies malware variants, defines how sensors are exploited, visualizes multiple ways that side-channel attacks are launched, and provides a comprehensive list of malware families that spread through the Google Play Store. In addition, the research provides details on threat defense solutions, such as malware detection tools and techniques presented in the last decade. Finally, it highlights open issues and identifies the research gap that needs to be addressed to meet the challenges of next-generation smartphones.

Analysis of SQL injection attacks in the cloud and in WEB applications

“…Lu et al 12 Alotaibi et al 13 Patidar et al 14 Liu et al 15 Alghawazi et al 16 Saini et al 17 Sheth et al 18 Okesola et al 19 Labib et al 20 Marashdih et al 21 Mehta et al 22 Henry et al 23 Pruzinec et al 24 Irungu et al 25 Fratty et al 26 Logozzo et al 27 Singh et al 28 Crespo-Martínez et al 29 Fu et al 30 Philip et al 31 Barsellotti et al 32 Mallissery et al 33 Lu et al 12 Alotaibi et al 13 Guan et al 34 Nasrullayev et al 35 Muhammad et al 36 Brintha et al 37 Al Badri et al [36] Lu et al 12 (2023)…”

Cybersecurity for Sustainable Smart Healthcare: State of the Art, Taxonomy, Mechanisms, and Essential Roles

“…These physical devices may include flaws that adversaries might exploit through side-channel attacks to sensitive healthcare information, such as cryptographic keys and passwords. Muhammad et al [76] and Niksirat et al [27] defined side-channel attacks in smart healthcare as security threats in which adversaries exploit unplanned information leakage from various channels and computing devices by analyzing physical parameters during their regular operation to collect sensitive healthcare information, such as cryptographic keys and passwords, and send it to a third party. In side-channel and secret attacks, attackers assume that data constantly leak from communication channels such as power consumption, electromagnetic radiation, and timing analysis, which they must exploit [27][77].…”

The Impact of Call Spoofing on Trust and Communication: A User Perception Study

“…Second, investigating the relationship between trust and knowledge sheds light on the psychological effects of call spoofing on user behavior [5]. Last but not least, recognizing demographic variances enables treatments and countermeasures to be tailored to certain user groups, addressing the particular difficulties encountered by various Indian population segments [6].…”