{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,13]],"date-time":"2026-06-13T05:41:40Z","timestamp":1781329300693,"version":"3.54.1"},"reference-count":30,"publisher":"SAGE Publications","issue":"2","license":[{"start":{"date-parts":[[2017,9,27]],"date-time":"2017-09-27T00:00:00Z","timestamp":1506470400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/journals.sagepub.com\/page\/policies\/text-and-data-mining-license"}],"content-domain":{"domain":["journals.sagepub.com"],"crossmark-restriction":true},"short-container-title":["Journal of Computer Security"],"published-print":{"date-parts":[[2018,1,8]]},"abstract":"<jats:p>In recent years, concerns are increasingly being expressed about the threats of side-channel attacks that exploit acoustic emanations from electronic as well as mechanical devices of daily use. With the increased level of sophistication in both hardware and applications that run on mobile phones, the number of possible ways in which their vulnerabilities can be exploited is also on the rise. In this article, we demonstrate a novel attack which uses the sound emanating from a tap made on the touchscreen of a smartphone to decipher the text being typed. The audio signal captured by the pair of microphones typically embedded in a smartphone is first processed to determine a candidate set of keys. Filters are employed to make this step robust against ambient noise. Natural language processing techniques are then used to estimate the most probable words and sentences that can be constructed from a sequence of taps. It is shown that using even off-the-shelf tools, the typed text including passwords can be guessed with reasonably high accuracy. Besides raising awareness about this potential side-channel attack, we identify the causes that allow it to succeed and suggest countermeasures.<\/jats:p>","DOI":"10.3233\/jcs-17975","type":"journal-article","created":{"date-parts":[[2017,9,29]],"date-time":"2017-09-29T10:37:34Z","timestamp":1506681454000},"page":"255-281","update-policy":"https:\/\/doi.org\/10.1177\/sage-journals-update-policy","source":"Crossref","is-referenced-by-count":9,"title":["A side-channel attack on smartphones: Deciphering key taps using built-in microphones"],"prefix":"10.1177","volume":"26","author":[{"given":"Haritabh","family":"Gupta","sequence":"first","affiliation":[{"name":"Department of Computer Science & Engineering, Indian Institute of Technology, Kharagpur, India. E-mails:\u00a0,\u00a0"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shamik","family":"Sural","sequence":"additional","affiliation":[{"name":"Department of Computer Science & Engineering, Indian Institute of Technology, Kharagpur, India. E-mails:\u00a0,\u00a0"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Vijayalakshmi","family":"Atluri","sequence":"additional","affiliation":[{"name":"Management Science and Information Systems Department, Rutgers University, USA. E-mails:\u00a0,\u00a0"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jaideep","family":"Vaidya","sequence":"additional","affiliation":[{"name":"Management Science and Information Systems Department, Rutgers University, USA. E-mails:\u00a0,\u00a0"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"179","published-online":{"date-parts":[[2017,9,27]]},"reference":[{"key":"ref001","doi-asserted-by":"crossref","unstructured":"D.\u00a0Asonov and R.\u00a0Agrawal, Keyboard acoustic emanations, in: Proceedings of IEEE Symposium on Security and Privacy, 2004, pp.\u00a03\u201311, ISSN 1081-6011. doi:10.1109\/SECPRI.2004.1301311.","DOI":"10.1109\/SECPRI.2004.1301311"},{"key":"ref002","doi-asserted-by":"publisher","DOI":"10.1109\/TASSP.1984.1164314"},{"key":"ref003","doi-asserted-by":"publisher","DOI":"10.1109\/29.32278"},{"key":"ref004","doi-asserted-by":"publisher","DOI":"10.1109\/TSA.2004.833008"},{"key":"ref005","doi-asserted-by":"crossref","unstructured":"Y.\u00a0Berger, A.\u00a0Wool and A.\u00a0Yeredor, Dictionary attacks using keyboard acoustic emanations, in: 13th ACM Conference on Computer and Communications Security, 2006, pp.\u00a0245\u2013254.","DOI":"10.1145\/1180405.1180436"},{"key":"ref006","unstructured":"V.V.\u00a0Bochkarev, A.V.\u00a0Shevlyakova and V.D.\u00a0Solovyev, Average word length dynamics as indicator of cultural changes in society, arXiv:1208.6109, 2012."},{"issue":"4","key":"ref007","first-page":"467","volume":"18","author":"Brown P.F.","year":"1992","journal-title":"Computational linguistics"},{"key":"ref008","doi-asserted-by":"publisher","DOI":"10.1109\/MPRV.2004.21"},{"key":"ref009","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2013.2266775"},{"key":"ref010","doi-asserted-by":"crossref","unstructured":"G.\u00a0de Souza Faria and H.Y.\u00a0Kim, Identification of pressed keys by acoustic transfer function, in: Systems, Man, and Cybernetics (SMC), 2015 IEEE International Conference on, IEEE, 2015, pp.\u00a0240\u2013245.","DOI":"10.1109\/SMC.2015.54"},{"key":"ref011","doi-asserted-by":"crossref","unstructured":"H.\u00a0Gupta, S.\u00a0Sural, V.\u00a0Atluri and J.\u00a0Vaidya, Deciphering text from touchscreen key taps, in: Proceedings, Data and Applications Security and Privacy XXX\u00a0\u2013 30th Annual IFIP WG 11.3 Conference, DBSec 2016, Trento, Italy, July 18\u201320, 2016, 2016, pp.\u00a03\u201318.","DOI":"10.1007\/978-3-319-41483-6_1"},{"key":"ref012","doi-asserted-by":"crossref","unstructured":"F.\u00a0Gustafsson and F.\u00a0Gunnarsson, Positioning using time-difference of arrival measurements, in: IEEE International Conference on Acoustics, Speech, and Signal Processing, Vol.\u00a06, 2003, p.\u00a0553.","DOI":"10.1109\/ICASSP.2003.1201741"},{"key":"ref013","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2013.2247758"},{"key":"ref014","doi-asserted-by":"publisher","DOI":"10.1016\/j.pmcj.2015.12.001"},{"key":"ref015","unstructured":"D.\u00a0Jurafsky and J.H.\u00a0Martin, Speech and Language Processing\u00a0\u2013 An Introduction to Natural Language Processing, Computational Linguistics, and Speech Recognition, Prentice Hall, 2008."},{"key":"ref016","doi-asserted-by":"publisher","DOI":"10.1109\/TASSP.1976.1162830"},{"key":"ref017","doi-asserted-by":"crossref","unstructured":"X.\u00a0Liu, Z.\u00a0Zhou, W.\u00a0Diao, Z.\u00a0Li and K.\u00a0Zhang, When good becomes evil: Keystroke inference with smartwatch, in: Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, ACM, 2015, pp.\u00a01273\u20131285.","DOI":"10.1145\/2810103.2813668"},{"key":"ref018","doi-asserted-by":"crossref","unstructured":"R.\u00a0Meng, J.\u00a0Isenhower, C.\u00a0Qin and S.\u00a0Nelakuditi, Can smartphone sensors enhance kinect experience? in: ACM International Symposium on Mobile Ad Hoc Networking and Computing, 2012, pp.\u00a0265\u2013266. ISBN 978-1-4503-1281-3. doi:10.1145\/2248371.2248417.","DOI":"10.1145\/2248371.2248417"},{"key":"ref019","doi-asserted-by":"crossref","unstructured":"W.\u00a0Meng, W.H.\u00a0Lee, S.R.\u00a0Murali and S.P.T.\u00a0Krishnan, Charging me and I know your secrets!: Towards juice filming attacks on smartphones, in: Proceedings of the 1st ACM Workshop on Cyber-Physical System Security, 2015, pp.\u00a089\u201398. ISBN 978-1-4503-3448-8. doi:10.1145\/2732198.2732205.","DOI":"10.1145\/2732198.2732205"},{"key":"ref020","doi-asserted-by":"crossref","unstructured":"E.\u00a0Miluzzo, A.\u00a0Varshavsky, S.\u00a0Balakrishnan and R.R.\u00a0Choudhury, Tapprints: Your finger taps have fingerprints, in: Proceedings of the 10th International Conference on Mobile Systems, Applications, and Services, 2012, pp.\u00a0323\u2013336. ISBN 978-1-4503-1301-8. doi:10.1145\/2307636.2307666.","DOI":"10.1145\/2307636.2307666"},{"key":"ref021","doi-asserted-by":"crossref","unstructured":"D.\u00a0Ping, X.\u00a0Sun and B.\u00a0Mao, TextLogger: Inferring longer inputs on touch screen using motion sensors, in: Proceedings of the 8th ACM Conference on Security & Privacy in Wireless and Mobile Networks, ACM, 2015, pp.\u00a01\u201312.","DOI":"10.1145\/2766498.2766511"},{"key":"ref022","unstructured":"L.\u00a0Rabiner and R.W.\u00a0Schafer, Digital Processing of Speech Signals."},{"key":"ref023","doi-asserted-by":"crossref","unstructured":"M.D.\u00a0Riley, Some applications of tree-based modelling to speech and language, in: Workshop on Speech and Natural Language, 1989, pp.\u00a0339\u2013352.","DOI":"10.3115\/1075434.1075492"},{"key":"ref024","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2010.2096217"},{"key":"ref025","doi-asserted-by":"crossref","unstructured":"F.\u00a0Song and W.B.\u00a0Croft, A general language model for information retrieval, in: Proceedings of the Eighth International Conference on Information and Knowledge Management, 1999, pp.\u00a0316\u2013321.","DOI":"10.1145\/319950.320022"},{"key":"ref026","unstructured":"R.\u00a0Williams, 7 in 10 of world\u2019s population using smartphones by 2020,\n                      The Telegraph, UK\n                      (2015). http:\/\/www.telegraph.co.uk\/technology\/mobile-phones\/11646593\/7-in-10-of-worlds-population-using-smartphones-by-2020.html."},{"key":"ref027","doi-asserted-by":"publisher","DOI":"10.1109\/MMUL.2012.24"},{"key":"ref028","doi-asserted-by":"crossref","unstructured":"T.\u00a0Zhu, Q.\u00a0Ma, S.\u00a0Zhang and Y.\u00a0Liu, Context-free attacks using keyboard acoustic emanations, in: Proceedings of the ACM Conference on Computer and Communications Security, 2014, pp.\u00a0453\u2013464.","DOI":"10.1145\/2660267.2660296"},{"key":"ref029","unstructured":"Z.\u00a0Zhu, D.\u00a0Bernhard and I.\u00a0Gurevych, A monolingual tree-based translation model for sentence simplification, in: Proceedings of the 23rd International Conference on Computational Linguistics, 2010, pp.\u00a01353\u20131361."},{"key":"ref030","doi-asserted-by":"publisher","DOI":"10.1145\/1609956.1609959"}],"container-title":["Journal of Computer Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/journals.sagepub.com\/doi\/pdf\/10.3233\/JCS-17975","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/journals.sagepub.com\/doi\/full-xml\/10.3233\/JCS-17975","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/journals.sagepub.com\/doi\/pdf\/10.3233\/JCS-17975","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T20:45:11Z","timestamp":1777495511000},"score":1,"resource":{"primary":{"URL":"https:\/\/journals.sagepub.com\/doi\/10.3233\/JCS-17975"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,9,27]]},"references-count":30,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2018,1,8]]}},"alternative-id":["10.3233\/JCS-17975"],"URL":"https:\/\/doi.org\/10.3233\/jcs-17975","relation":{},"ISSN":["0926-227X","1875-8924"],"issn-type":[{"value":"0926-227X","type":"print"},{"value":"1875-8924","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017,9,27]]}}}