When Free Tier Becomes Free to Enter: A Non-Intrusive Way to Identify Security Cameras with no Cloud Subscription
When Free Tier Becomes Free to Enter: A Non-Intrusive Way to Identify Security Cameras with no Cloud Subscription
复制标题
DOI：
10.1145/3576915.3623083
复制
发表时间：
2023-11
期刊：
影响因子：
--
通讯作者：
Yan He;Qiuye He;Song Fang;Yao Liu
中科院分区：
文献类型：
--
作者：
Yan He;Qiuye He;Song Fang;Yao Liu
无线安全摄像头可以阻止入侵者。与硬件配套的是，消费者可以每月定期支付费用，将视频录制到云上，或者使用提供运动警报的免费套餐，有时还可以通过摄像头应用程序进行直播。许多用户可能会购买硬件，而不购买订阅服务，以节省费用，这从本质上降低了它们的功效。我们发现，由响应刺激运动的摄像机产生的无线流量可以揭示是否正在流式传输视频。像窃贼这样的恶意用户可能会利用这些知识来瞄准那些没有上传视频或打开实时观看模式的“弱摄像头”。在这种情况下，犯罪活动虽然是在摄像机的监测范围内进行的，但不会被记录下来。因此，我们描述了一种名为WeakCamID的新技术，该技术可以产生运动刺激并嗅探由此产生的无线流量以推断相机状态。我们进行了一项涉及220个用户的调查，发现所有用户都认为无论订阅状态如何，相机都有一致的安全保证。我们的发现打破了这种“常识”。我们在一个移动应用程序中实现了WeakCamID，并对11个流行的无线相机进行了实验，结果表明，WeakCamID可以在不到19秒的时间内以95%的平均准确率识别弱相机。
Wireless security cameras may deter intruders. Accompanying the hardware, consumers may pay recurring monthly fees for recording videos to the cloud, or use the free tier offering motion alerts and sometimes live streams via the camera app. Many users may purchase the hardware without buying the subscription to save money, which inherently reduces their efficacy. We discover that the wireless traffic generated by a camera responding to stimulating motion may disclose whether or not video is being streamed. A malicious user such as a burglar may use such knowledge to target homes with a ''weak camera'' that does not upload video or turn on live view mode. In such cases, criminal activities would not be recorded though they are performed within the monitoring area of the camera. Accordingly, we describe a novel technique called WeakCamID that creates motion stimuli and sniffs resultant wireless traffic to infer the camera state. We perform a survey involving a total of 220 users, finding that all users think cameras have a consistent security guarantee regardless of the subscription status. Our discovery breaks such ''common sense''. We implement WeakCamID in a mobile app and experiment with 11 popular wireless cameras to show that WeakCamID can identify weak cameras with a mean accuracy of around 95% and within less than 19 seconds.