PinSecurityAnalysis/Testing.py at main · diegortl2/PinSecurityAnalysis · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
# -*- coding: utf-8 -*-
"""
Created on Sat Nov  7

@authors: Ricardo Contreras, Diego Rivera
"""

import numpy as np

#Pick the top 100 most used pins out of a leaked pin list. Blacklist is optional
def getTop100Pins(pins, blacklist=None):
    if blacklist is not None:
        for i in range(0, blacklist.shape[0]):
            pins = np.delete(pins,np.where(pins==blacklist[i]))
    (unique, counts) = np.unique(pins, return_counts=True)
    _type=np.dtype([('pins',unique.dtype),('counts',counts.dtype)])
    frequencies = np.empty(len(unique),dtype=_type)
    frequencies['pins'] = unique
    frequencies['counts'] = counts
    frequencies = frequencies[np.argsort(-1*frequencies['counts'])]
    top100 = frequencies[:100]
    return top100

def file_read(fname):
        content_array = []
        with open(fname) as f:
                #Content_list is the list that contains the read lines.
                for line in f:
                        content_array.append(line)
                #print(content_array)
                return content_array;

if __name__ == "__main__":

    pins4digit = np.array(file_read('RockYou-4-digit.txt')) #Dataset 4 digit pins
    pins6digit = np.array(file_read('RockYou-6-digit.txt')) #Dataset 6 digit pins
    ddbl4digit = np.array(file_read('DD-4-digit-2740.txt')) #Data Driven blacklist 4 digits
    iosbl4digit = np.array(file_read('iOS-4-digit.txt'))    #IOS blacklist 4 digits
    iosbl6digit = np.array(file_read('iOS-6-digit.txt'))    #IOS Blacklist 6 digits

    #Create random test set of 1000 pins, out of the leaked pin lists
    test_set_4digits = np.random.choice(pins4digit, size=1000)
    test_set_6digits = np.random.choice(pins6digit, size=1000)

    #Remove blacklisted pins out of the base leaked pin sets.
    blpins4digit = pins4digit
    for i in range(0, iosbl4digit.shape[0]):
            blpins4digit = np.delete(blpins4digit,np.where(blpins4digit==iosbl4digit[i]))
    blpins6digit = pins6digit
    for i in range(0, iosbl6digit.shape[0]):
            blpins6digit = np.delete(blpins6digit,np.where(blpins6digit==iosbl6digit[i]))

    #Create test sets excluding blacklisted pins.
    bltest_set_4digits = np.random.choice(blpins4digit, size=1000)
    bltest_set_6digits = np.random.choice(blpins6digit, size=1000)

    #Select most common pins to use in the attack. Pins are sorted in descending
    # order by number of occurences in the leaked test set.
    attack_list4digit = getTop100Pins(pins4digit)
    attack_list6digit = getTop100Pins(pins6digit)

    #This array will tell us how many pins match the one we used for a guess
    test_results_4digit = np.array(np.zeros(1000)) #Number of tests
    test_results_6digit = np.array(np.zeros(1000))

    print('------Test 4 Digit pins, no blacklisting')
    for i in range(0, 100):
        value = attack_list4digit['pins'][i]
        #print('Pin: ', value)
        indices = np.where(test_set_4digits == value)
        test_results_4digit[indices] = 1
        unique, counts = np.unique(test_results_4digit, return_counts=True)
        hits = counts[np.where(unique==1)]
        print('Iteration: ', i+1,' Number of hits: ', hits)

    print('------Test 6 Digit pins, no blacklisting')
    for i in range(0, 100):
        value = attack_list6digit['pins'][i]
        #print('Pin: ', value)
        indices = np.where(test_set_6digits == value)
        test_results_6digit[indices] = 1
        unique, counts = np.unique(test_results_6digit, return_counts=True)
        hits = counts[np.where(unique==1)]
        print('Iteration: ', i+1,' Number of hits: ', hits)

    #Create attack lists of top 100 pins in the leaked dataset, but excluding
    # Pins in the blacklist.
    attack_list4digit = getTop100Pins(pins4digit, blacklist=iosbl4digit)
    attack_list6digit = getTop100Pins(pins6digit, blacklist=iosbl6digit)

    #Reset test results
    test_results_4digit = np.array(np.zeros(1000)) #Number of tests
    test_results_6digit = np.array(np.zeros(1000))

    print('------Test 4 Digit pins, WITH blacklisting')
    for i in range(0, 100):
        value = attack_list4digit['pins'][i]
        #print('Pin: ', value)
        indices = np.where(bltest_set_4digits == value)
        test_results_4digit[indices] = 1
        unique, counts = np.unique(test_results_4digit, return_counts=True)
        hits = counts[np.where(unique==1)]
        print('Iteration: ', i+1,' Number of hits: ', hits)

    print('------Test 6 Digit pins, WITH blacklisting')
    for i in range(0, 100):
        value = attack_list6digit['pins'][i]
        #print('Pin: ', value)
        indices = np.where(bltest_set_6digits == value)
        test_results_6digit[indices] = 1
        unique, counts = np.unique(test_results_6digit, return_counts=True)
        hits = counts[np.where(unique==1)]
        print('Iteration: ', i+1,' Number of hits: ', hits)