AI with 95% accuracy can steal passwords by 'listening' to keystrokes: Study


San Francisco, Aug 16 (IANS): Researchers have found that threat actors could use artificial intelligence (AI) tools to steal user passwords with near-perfect accuracy by "listening" to an unsuspecting person's keystrokes, a new study has shown.

According to the results published in the study by the US-based Cornell University, when the AI programme was activated on a nearby smartphone, it was able to accurately reproduce the typed password with a whopping 95 per cent accuracy.

A group of computer scientists from the UK trained an AI model to recognise keystroke sounds on the 2021 version of a MacBook Pro -- dubbed a "popular off-the-shelf laptop", reports New York Post.

During a Zoom video conference, the hacker-friendly AI tool was also extremely accurate while "listening" to typing through the laptop's microphone.

According to the researchers, it reproduced the keystrokes with 93 per cent accuracy, a record for the medium.

Moreover, the researchers cautioned that many users are unaware that bad actors could monitor their typing in order to breach accounts -- a type of cyberattack known as an "acoustic side-channel attack".

"The ubiquity of keyboard acoustic emanations makes them not only a readily available attack vector but also prompts victims to underestimate (and therefore not try to hide) their output," the study said.

"For example, when typing a password, people will regularly hide their screen but will do little to obfuscate their keyboard's sound," it added.

To test accuracy, the researchers pressed 36 keys on the laptop 25 times each, with each press "varying in pressure and finger".

The programme could "listen" for distinguishing elements of each key press, such as sound wavelengths.

The smartphone -- an iPhone 13 mini, was positioned 17 centimetres away from the keyboard.

 

  

Top Stories


Leave a Comment

Title: AI with 95% accuracy can steal passwords by 'listening' to keystrokes: Study



You have 2000 characters left.

Disclaimer:

Please write your correct name and email address. Kindly do not post any personal, abusive, defamatory, infringing, obscene, indecent, discriminatory or unlawful or similar comments. Daijiworld.com will not be responsible for any defamatory message posted under this article.

Please note that sending false messages to insult, defame, intimidate, mislead or deceive people or to intentionally cause public disorder is punishable under law. It is obligatory on Daijiworld to provide the IP address and other details of senders of such comments, to the authority concerned upon request.

Hence, sending offensive comments using daijiworld will be purely at your own risk, and in no way will Daijiworld.com be held responsible.