Large-Scale Analysis of Remote Code Injection Attacks in Android Apps
Joint Authors
Source
Security and Communication Networks
Issue
Vol. 2018, Issue 2018 (31 Dec. 2018), pp.1-17, 17 p.
Publisher
Hindawi Publishing Corporation
Publication Date
2018-04-17
Country of Publication
Egypt
No. of Pages
17
Main Subjects
Information Technology and Computer Science
Abstract EN
It is pretty well known that insecure code updating procedures for Android allow remote code injection attack.
However, other than codes, there are many resources in Android that have to be updated, such as temporary files, images, databases, and configurations (XML and JSON).
Security of update procedures for these resources is largely unknown.
This paper investigates general conditions for remote code injection attacks on these resources.
Using this, we design and implement a static detection tool that automatically identifies apps that meet these conditions.
We apply the detection tool to a large dataset comprising 9,054 apps, from three different types of datasets: official market, third-party market, and preinstalled apps.
As a result, 97 apps were found to be potentially vulnerable, with 53 confirmed as vulnerable to remote code injection attacks.
American Psychological Association (APA)
Choi, Hyunwoo& Kim, Yongdae. 2018. Large-Scale Analysis of Remote Code Injection Attacks in Android Apps. Security and Communication Networks،Vol. 2018, no. 2018, pp.1-17.
https://search.emarefa.net/detail/BIM-1213986
Modern Language Association (MLA)
Choi, Hyunwoo& Kim, Yongdae. Large-Scale Analysis of Remote Code Injection Attacks in Android Apps. Security and Communication Networks No. 2018 (2018), pp.1-17.
https://search.emarefa.net/detail/BIM-1213986
American Medical Association (AMA)
Choi, Hyunwoo& Kim, Yongdae. Large-Scale Analysis of Remote Code Injection Attacks in Android Apps. Security and Communication Networks. 2018. Vol. 2018, no. 2018, pp.1-17.
https://search.emarefa.net/detail/BIM-1213986
Data Type
Journal Articles
Language
English
Notes
Includes bibliographical references
Record ID
BIM-1213986