A majority of today's mobile apps integrate web content of various kinds. Unfortunately, the interactions between app code and web content expose new attack vectors: a malicious app can subvert its embedded web content to steal user secrets; on the other hand, malicious web content can use the privileges of its embedding app to exfiltrate sensitive information such as the user's location and contacts. In this paper, we discuss security weaknesses of the interface between app code and web content through attacks, then introduce defenses that can be deployed without modifying the OS. Our defenses feature WIREframe, a service that securely embeds and renders external web content in Android apps, and in turn, prevents attacks between embedded web and host apps. WIREframe fully mediates the interface between app code and embedded web content. Unlike the existing web-embedding mechanisms, WIREframe allows both apps and embedded web content to define simple access policies to protect their own resources. These policies recognize fine-grained security principals, such as origins, and control all interactions between apps and the web. We also introduce WIRE (Web Isolation Rewriting Engine), an offline app rewriting tool that allows app users to inject WIREframe protections into existing apps. Our evaluation, based on 7166 popular apps and 20 specially selected apps, shows these techniques work on complex apps and incur acceptable end-to-end performance overhead.
the event was sponsored by IFIP WG 5.4.The 39 full papers presented were carefully reviewed and selected from 43 submissions. They are organized in the following thematic sections: New perspectives of TRIZ; AI in systematic innovation; systematic innovations supporting IT and AI; TRIZ applications; TRIZ education and ecosystem.
The study is possibly the first to examine the role of knowledge sharing in enhancing the competitiveness of rural tourism destinations, with a particular emphasis on sustainable management, destination marketing efforts, and comparative and competitive advantage. 315 valid questionnaires were collected from domestic and international visitors to Sarawak's five rural tourism destinations. A PLS-SEM approach was used to evaluate the developed model, with PLS estimation and hypothesis testing performed using the WarpPLS software. Interestingly, the statistical findings indicate that knowledge sharing has a significant effect on rural tourism destinations' competitiveness. The findings unavoidably contributed to the fundamental concept of destination competitiveness by identifying knowledge sharing as a resource for developing rural tourism destination competitiveness and its contribution to sustainable management, destination marketing efforts, as well as the comparative and competitive advantage of rural tourism destinations that are currently underdeveloped. This study contributes a comprehensive picture of how an intangible innovation can help develop a tourism destination's competitiveness. Future research should concentrate on identifying appropriate platforms to facilitate knowledge sharing among tourism stakeholders.
scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.