This AI tool can steal your data just by listening to what keys you press

Date:
Mon, 07 Aug 2023 13:03:08 +0000

Description:
Researchers at Cornell University develop an AI classifier that can work out keystrokes from their sound alone.

FULL STORY ======================================================================

New research has revealed a novel way to steal sensitive information - by working out what a target has typed via the sound of key presses alone.

A team at Cornell University has published a paper detailing their exploits, offering, in its words, "a practical implementation of a state-of-the-art
deep learning model in order to classify laptop keystrokes, using a
smartphone integrated microphone."

Dubbed acoustic side-channel attacks, the team noted the potential danger of this vector becoming a reality outside of a lab, given the prevalence of microphones in all sorts of devices and the rapid development of deep
learning tools. In the right key

First, the classifier had to be trained on a specific keyboard - in this
case, the team used a MacBook Pro. They pressed 36 keys on the board 25 times each, and recorded the sound of these presses in two ways - once using a smartphone microphone, and the other using the video conferencing software Zoom.

The AI within the classifier, by discerning the minute differences in the waveforms produced by each keystroke, could then work out what key was
pressed when in subsequent tests. read more

In the Metaverse, your identity can be revealed just by moving

New attack method can steal offline PC data through walls

AI can crack most passwords in less than a minute

Both recording methods produced a high accuracy rate in these tests. For classifiers trained using the phone microphone, the accuracy rate for detecting keystrokes was 95%, and for those trained using Zoom it was 93%.

The researchers concede, however, that the classifier's accuracy can be undermined in certain ways, such as the user changing their typing technique. For instance, by touch typing, the accuracy rate drops to 40-64%.

They also said that certain software could be used to add extra noise to keystrokes to mask their true sound and thus further weaken the classifier's effectiveness.

However, with mechanical keyboards, where the audibility of keystrokes is clear, the classifier works well. It is also effective with quieter membrane keyboards too, so should this proof-of-concept become a reality, using software to obscure typing sound would be the best way to avoid being exploited by such attacks. Most cyberattacks still use basic methods, so stay safe with the best endpoint protection .



======================================================================
Link to news story: https://www.techradar.com/pro/this-ai-tool-can-steal-your-data-just-by-listeni ng-to-what-keys-you-press


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)