TouchLogger: Inferring Keystrokes On Touch Screen From Smartphone Motion
Attacks that use side channels, such as sound and electromagnetic emanation, to infer keystrokes on physical keyboards are ineffective on smartphones without physical keyboards. The authors describe a new side channel, motion, on touch screen smartphones with only soft keyboards. Since typing on different locations on the screen causes different vibrations, motion data can be used to infer the keys being typed. To demonstrate this attack, they developed TouchLogger, an Android application that extracts features from device orientation data to infer keystrokes.