【24h】

A closer look into privacy and security of Chromecast multimedia cloud communications

机译:深入了解Chromecast多媒体云通信的隐私和安全性

获取原文

摘要

Cloud computing has enabled a wide range of streaming multimedia applications and many HDMI based devices have emerged as a result. Chromecast is one of these devices that plugs into the HDMI port of a larger screen and turns it into a smart screen. With Chromecast, you can stream videos from the cloud onto a larger screen and control it from a mobile device such as a smart-phone, tablet or a laptop. The idea is to cast the multimedia to a larger second screen and use the smaller one as a remote control. A growing number of cloud based multimedia content providers such as YouTube, Netflix, Hulu and HBO are offering applications to support Chromecast streaming for mobile operating systems. This device uses Discovery and Launch (DIAL) protocol, developed by YouTube and Netflix. We examined the network packets exchanged between the smaller remote control device and the Chromecast attached larger screen. While Chromecast encrypts most of the content, remote control device sends control packets to the cloud servers in the clear-text, which makes it vulnerable to reply-attacks or session-hijacking attacks. Besides, data communication with cloud servers leak personal information outside of the home-network, raising privacy concerns. Network protocols used by Chromecast are investigated and known vulnerabilities are listed. A method to detect the existence of Chromecast behind a home-router is proposed.
机译:云计算已启用了广泛的流媒体多媒体应用程序,因此出现了许多基于HDMI的设备。 Chromecast是其中一种设备,可插入大屏幕的HDMI端口并将其转变为智能屏幕。借助Chromecast,您可以将视频从云端流式传输到更大的屏幕上,并可以通过智能手机,平板电脑或笔记本电脑等移动设备进行控制。这个想法是将多媒体投射到更大的第二个屏幕,并使用较小的一个作为遥控器。越来越多的基于云的多媒体内容提供商(例如YouTube,Netflix,Hulu和HBO)正在提供支持移动操作系统Chromecast流的应用程序。此设备使用YouTube和Netflix开发的发现和启动(DIAL)协议。我们检查了在较小的远程控制设备和较大的Chromecast连接的屏幕之间交换的网络数据包。 Chromecast会加密大多数内容,而远程控制设备会以明文形式将控制数据包发送到云服务器,这使其很容易遭受回复攻击或会话劫持攻击。此外,与云服务器的数据通信将个人信息泄漏到家庭网络之外,从而引发了隐私问题。对Chromecast使用的网络协议进行了调查,并列出了已知的漏洞。提出了一种检测家庭路由器背后的Chromecast的方法。

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号