Acoustic Side-Channel Attacks on a Computer Mouse
Mauro Conti, Marin Duroyon, Gabriele Orazi, Gene Tsudik
TL;DR
This work investigates acoustic side-channel attacks on computer mice to determine whether mouse movements emit audio signatures that can be exploited. Through phased experiments, it demonstrates high accuracy for four-direction movements using a single microphone (approximately 98%), and sustained accuracy for twelve two-dimensional movements with stereo smartphone recordings (around 94%), along with 91% accuracy for detecting a window-close action. The approach combines MFCC features with ML classifiers (CNN and random forest) in both controlled and real-world scenarios, including multi-participant validation. These findings reveal a tangible security risk from mouse-based ASCAs and motivate mitigations and further exploration of multi-peripheral leakage, potentially in combination with keyboard ASCAs.
Abstract
Acoustic Side-Channel Attacks (ASCAs) extract sensitive information by using audio emitted from a computing devices and their peripherals. Attacks targeting keyboards are popular and have been explored in the literature. However, similar attacks targeting other human interface peripherals, such as computer mice, are under-explored. To this end, this paper considers security leakage via acoustic signals emanating from normal mouse usage. We first confirm feasibility of such attacks by showing a proof-of-concept attack that classifies four mouse movements with 97% accuracy in a controlled environment. We then evolve the attack towards discerning twelve unique mouse movements using a smartphone to record the experiment. Using Machine Learning (ML) techniques, the model is trained on an experiment with six participants to be generalizable and discern among twelve movements with 94% accuracy. In addition, we experiment with an attack that detects a user action of closing a full-screen window on a laptop. Achieving an accuracy of 91%, this experiment highlights exploiting audio leakage from computer mouse movements in a realistic scenario.
