Android-based Cryptocurrency Wallets: Attacks and Countermeasures

Cong Li; Daojing He; Shihao Li; Sencun Zhu; Sammy Chan; Yao Cheng

doi:10.1109/Blockchain50366.2020.00010

Android-based Cryptocurrency Wallets: Attacks and Countermeasures

Cong Li
, Daojing He
, Shihao Li
, Sencun Zhu
, Sammy Chan
, Yao Cheng

East China Normal University
Pennsylvania State University
City University of Hong Kong
Agency for Science, Technology and Research, Singapore

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

19 Scopus citations

Abstract

The security of cryptocurrency wallets is directly related to the security of personal assets. However, due to the design defects of mobile operating system and cryptocurrency wallets, security incidents of cryptocurrency wallets occur frequently, causing irreversible losses to users' assets or privacy. In this paper, we study the security risks of Android-based cryptocurrency wallets. We establish the adversary model, analyze the attack surface originated from the Android OS, and demonstrate several attack vectors by conducting experiments on multiple popular cryptocurrency wallets in Google Play Store. Finally, we present several security defense strategies in response to the security risks.

Original language	English
Title of host publication	Proceedings - 2020 IEEE International Conference on Blockchain, Blockchain 2020
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	9-16
Number of pages	8
ISBN (Electronic)	9780738104959
DOIs	https://doi.org/10.1109/Blockchain50366.2020.00010
State	Published - Nov 2020
Externally published	Yes
Event	3rd IEEE International Conference on Blockchain, Blockchain 2020 - Virtual, Rhodes Island, Greece Duration: 2 Nov 2020 → 6 Nov 2020

Publication series

Name	Proceedings - 2020 IEEE International Conference on Blockchain, Blockchain 2020

Conference

Conference	3rd IEEE International Conference on Blockchain, Blockchain 2020
Country/Territory	Greece
City	Virtual, Rhodes Island
Period	2/11/20 → 6/11/20

Keywords

Android application security
Blockchain
Cryptocurrency wallets
Permission

Access to Document

10.1109/Blockchain50366.2020.00010

Cite this

Li, C., He, D., Li, S., Zhu, S., Chan, S., & Cheng, Y. (2020). Android-based Cryptocurrency Wallets: Attacks and Countermeasures. In Proceedings - 2020 IEEE International Conference on Blockchain, Blockchain 2020 (pp. 9-16). Article 9284708 (Proceedings - 2020 IEEE International Conference on Blockchain, Blockchain 2020). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/Blockchain50366.2020.00010

@inproceedings{95c36f07b3e545a282b8a567042dffd3,

title = "Android-based Cryptocurrency Wallets: Attacks and Countermeasures",

abstract = "The security of cryptocurrency wallets is directly related to the security of personal assets. However, due to the design defects of mobile operating system and cryptocurrency wallets, security incidents of cryptocurrency wallets occur frequently, causing irreversible losses to users' assets or privacy. In this paper, we study the security risks of Android-based cryptocurrency wallets. We establish the adversary model, analyze the attack surface originated from the Android OS, and demonstrate several attack vectors by conducting experiments on multiple popular cryptocurrency wallets in Google Play Store. Finally, we present several security defense strategies in response to the security risks.",

keywords = "Android application security, Blockchain, Cryptocurrency wallets, Permission",

author = "Cong Li and Daojing He and Shihao Li and Sencun Zhu and Sammy Chan and Yao Cheng",

note = "Publisher Copyright: {\textcopyright} 2020 IEEE.; 3rd IEEE International Conference on Blockchain, Blockchain 2020 ; Conference date: 02-11-2020 Through 06-11-2020",

year = "2020",

month = nov,

doi = "10.1109/Blockchain50366.2020.00010",

language = "英语",

series = "Proceedings - 2020 IEEE International Conference on Blockchain, Blockchain 2020",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "9--16",

booktitle = "Proceedings - 2020 IEEE International Conference on Blockchain, Blockchain 2020",

address = "美国",

}

Li, C, He, D, Li, S, Zhu, S, Chan, S & Cheng, Y 2020, Android-based Cryptocurrency Wallets: Attacks and Countermeasures. in Proceedings - 2020 IEEE International Conference on Blockchain, Blockchain 2020., 9284708, Proceedings - 2020 IEEE International Conference on Blockchain, Blockchain 2020, Institute of Electrical and Electronics Engineers Inc., pp. 9-16, 3rd IEEE International Conference on Blockchain, Blockchain 2020, Virtual, Rhodes Island, Greece, 2/11/20. https://doi.org/10.1109/Blockchain50366.2020.00010

Android-based Cryptocurrency Wallets: Attacks and Countermeasures. / Li, Cong; He, Daojing; Li, Shihao et al.
Proceedings - 2020 IEEE International Conference on Blockchain, Blockchain 2020. Institute of Electrical and Electronics Engineers Inc., 2020. p. 9-16 9284708 (Proceedings - 2020 IEEE International Conference on Blockchain, Blockchain 2020).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Android-based Cryptocurrency Wallets

T2 - 3rd IEEE International Conference on Blockchain, Blockchain 2020

AU - Li, Cong

AU - He, Daojing

AU - Li, Shihao

AU - Zhu, Sencun

AU - Chan, Sammy

AU - Cheng, Yao

PY - 2020/11

Y1 - 2020/11

N2 - The security of cryptocurrency wallets is directly related to the security of personal assets. However, due to the design defects of mobile operating system and cryptocurrency wallets, security incidents of cryptocurrency wallets occur frequently, causing irreversible losses to users' assets or privacy. In this paper, we study the security risks of Android-based cryptocurrency wallets. We establish the adversary model, analyze the attack surface originated from the Android OS, and demonstrate several attack vectors by conducting experiments on multiple popular cryptocurrency wallets in Google Play Store. Finally, we present several security defense strategies in response to the security risks.

AB - The security of cryptocurrency wallets is directly related to the security of personal assets. However, due to the design defects of mobile operating system and cryptocurrency wallets, security incidents of cryptocurrency wallets occur frequently, causing irreversible losses to users' assets or privacy. In this paper, we study the security risks of Android-based cryptocurrency wallets. We establish the adversary model, analyze the attack surface originated from the Android OS, and demonstrate several attack vectors by conducting experiments on multiple popular cryptocurrency wallets in Google Play Store. Finally, we present several security defense strategies in response to the security risks.

KW - Android application security

KW - Blockchain

KW - Cryptocurrency wallets

KW - Permission

UR - https://www.scopus.com/pages/publications/85099217819

U2 - 10.1109/Blockchain50366.2020.00010

DO - 10.1109/Blockchain50366.2020.00010

M3 - 会议稿件

AN - SCOPUS:85099217819

T3 - Proceedings - 2020 IEEE International Conference on Blockchain, Blockchain 2020

SP - 9

EP - 16

BT - Proceedings - 2020 IEEE International Conference on Blockchain, Blockchain 2020

PB - Institute of Electrical and Electronics Engineers Inc.

Y2 - 2 November 2020 through 6 November 2020

ER -

Li C, He D, Li S, Zhu S, Chan S, Cheng Y. Android-based Cryptocurrency Wallets: Attacks and Countermeasures. In Proceedings - 2020 IEEE International Conference on Blockchain, Blockchain 2020. Institute of Electrical and Electronics Engineers Inc. 2020. p. 9-16. 9284708. (Proceedings - 2020 IEEE International Conference on Blockchain, Blockchain 2020). doi: 10.1109/Blockchain50366.2020.00010

Android-based Cryptocurrency Wallets: Attacks and Countermeasures

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this