SCLib: A practical and lightweight defense against component hijacking in android applications

• Main Authors: WU, Daoyuan, CHENG, Yao, GAO, Debin, LI, Yingjiu, DENG, Robert H.
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2018
• Subjects: Access control; Android (operating system); Data privacy; Firmware; Network security; Open systems; Android applications; Android devices; Component libraries; Data Sharing; Functionality reuse; Fundamental mechanisms; Mandatory access control; Proof of concept; Mobile security; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/4088; https://ink.library.smu.edu.sg/context/sis_research/article/5091/viewcontent/1801.04372.pdf
• Institution: Singapore Management University

Cross-app collaboration via inter-component communication is a fundamental mechanism on Android. Although it brings the benefits such as functionality reuse and data sharing, a threat called component hijacking is also introduced. By hijacking a vulnerable component in victim apps, an attack app can...