Stoyan Mechev
Nikola Vaptsarov Naval Academy – Varna, Bulgaria
https://doi.org/10.53656/math2024-5-1-ana
Abstract. This paper demonstrates that it is possible to access a mobile phone's sensors through a web browser without the user's knowledge. Thus mobile phones are vulnerable to side-channel attacks. A software tool was developed to check access to a smartphone's sensors and generate a report with results and recommendations.
After reviewing scientific publications on the topic, a technical experiment was conducted to prove that access to various sensors of the examined device can be accessed without the user being aware of it. The experimental results show that Chrome and Samsung Internet browsers, running on Android, are vulnerable to side-channel attacks. The research methods used in this paper were comparative analysis, synthesis and technical experiment.
Keywords: Android; iOS; security; vulnerability; browser; web browser; side-channel attacks
