SonicEvasion: a stealthy ultrasound based invasion using covert communication in smart phones and its security

Mobile devices are no less than ticking time bombs if examined from security perspective, as their exertion is intense and relative security measures are quite a few. Attackers at present scenario are switching over to techniques that easily obfuscate the existing state-of-art tools and victims to get their work done. Evasion is one such tactic to confuse security system or obfuscate the information flow so as to go unnoticed from them. Whereas, covert channels are channels that hide the existence of communication itself, thereby making it unidentifiable for users as well as state-of-art tools. The paper presents a novel attack namely IEII(Implicit Evasive Information Invasion) presenting an algorithm developed to attack privacy and security of mobile devices. As a solution to the insecurity posed by the attack, a novel detection mechanism is also proposed. Concisely, the paper shows a novel approach showing an attack IEII with a level of obfuscation to bypass existing state-of-art mechanisms such as SuSi, FlowDroid etc. Also, its detection mechanism using AspectJ is developed. Hence, the paper opens up a new area depicting unforeseen threats and implementing its security in mobile devices with reference to the novel attack and detection proposed.