Tracking Explicit and Control Flows in Java and Native Android Apps Code

Graa, Mariem; Cuppens, Frédéric; Cuppens-Boulahia, Nora; Lanet, Jean-Louis

doi:10.5220/0005686603070316

Cited by 3 publications

(2 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In our approach, the malicious process is installed in the personnel computer and not in the device. Many dynamic taint analysis approaches defined in smartphones like TaintDroid [7], AppFence [15] and Graa et al [11], [9] allow detection of sensitive data leakage by third party applications running in the Android device using the data tainting. Wang et al [28] enforce security policies on data flows for Android applications to prevent unauthorized usb hardware flows.…”

Section: Performance Evaluationmentioning

confidence: 99%

“…Dorazio et al [6] investigate how an attacker could exfiltrate data from a paired iOS device by abusing a library and a command line tool distributed with iTunes. Existing security tools [7], [8], [9], [10], [1] in Android systems focus on detection of the sensitive data leakage. While such tools may be effective in protecting against malicious third party applications installed in the Android systems, they are less suitable when the data exfiltration is performed by application installed in the personal computer requesting connection to the Android IoT device.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Detection and Response to Data Exfiltration from Internet of Things Android Devices

Graa

Kome

Cuppens-Boulahia

et al. 2018

ICT Systems Security and Privacy Protection

Self Cite

View full text Add to dashboard Cite

Hackers can exfiltrate sensitive data stored in an IoT device such as Android smartphones. He/She abuses the Android pairing mode and targets a personal computer system previously trusted by the device user. The existing protocols that allow file transfer from Android IoT devices to the computer cannot detect this attack. In this paper, we propose an approach to detect attacks exploiting trusted relationship between a third party system such as personal computer and an Android device to exfiltrate user data from the victim device to an attacker. We implement a protocol to secure communication between IoT Android device and third party system. Our approach has been proved to be effective in detecting these category of attacks with reasonable performance overheads.

show abstract

Section: Performance Evaluationmentioning

confidence: 99%