Potential privacy vulnerabilities in android data sharing between applications

Taenam Cho, Seung Hyun Seo, Seung-Joo Kim

Research output: Contribution to journalArticle

Abstract

High-performance smartphones have enabled people to accomplish diverse types of work thanks to apps which provide unprecedented portability and convenience. Unlike PCs, smartphones are constantly on and connected with the Internet via WiFi or mobile communication networks. Nonetheless, such convenience also sets up an environment favorable for attackers as well, possibly leading to the leakage of user sensitive information in real-time. In this paper, we analyzed the vulnerabilities of ContentProviders, and how it is able to leak the data of other apps. In order to show the risk of illegal leakage of personal data stored in other apps, we created a proof-of-concept malicious application by using the potential vulnerabilities which may be exploited by attackers. Then, we proposed countermeasures to address the vulnerabilities of ContentProviders.

Original languageEnglish
Pages (from-to)1517-1531
Number of pages15
JournalInformation (Japan)
Volume17
Issue number4
Publication statusPublished - 2014

Fingerprint

Application programs
Smartphones
Data privacy
Telecommunication networks
Internet
Android (operating system)

Keywords

  • Android
  • Content Provider
  • Data sharing
  • Malware
  • Security

ASJC Scopus subject areas

  • General

Cite this

Potential privacy vulnerabilities in android data sharing between applications. / Cho, Taenam; Seo, Seung Hyun; Kim, Seung-Joo.

In: Information (Japan), Vol. 17, No. 4, 2014, p. 1517-1531.

Research output: Contribution to journalArticle

Cho, Taenam ; Seo, Seung Hyun ; Kim, Seung-Joo. / Potential privacy vulnerabilities in android data sharing between applications. In: Information (Japan). 2014 ; Vol. 17, No. 4. pp. 1517-1531.
@article{23231a1b310448d3a94aa3fe268bd152,
title = "Potential privacy vulnerabilities in android data sharing between applications",
abstract = "High-performance smartphones have enabled people to accomplish diverse types of work thanks to apps which provide unprecedented portability and convenience. Unlike PCs, smartphones are constantly on and connected with the Internet via WiFi or mobile communication networks. Nonetheless, such convenience also sets up an environment favorable for attackers as well, possibly leading to the leakage of user sensitive information in real-time. In this paper, we analyzed the vulnerabilities of ContentProviders, and how it is able to leak the data of other apps. In order to show the risk of illegal leakage of personal data stored in other apps, we created a proof-of-concept malicious application by using the potential vulnerabilities which may be exploited by attackers. Then, we proposed countermeasures to address the vulnerabilities of ContentProviders.",
keywords = "Android, Content Provider, Data sharing, Malware, Security",
author = "Taenam Cho and Seo, {Seung Hyun} and Seung-Joo Kim",
year = "2014",
language = "English",
volume = "17",
pages = "1517--1531",
journal = "Information (Japan)",
issn = "1343-4500",
publisher = "International Information Institute",
number = "4",

}

TY - JOUR

T1 - Potential privacy vulnerabilities in android data sharing between applications

AU - Cho, Taenam

AU - Seo, Seung Hyun

AU - Kim, Seung-Joo

PY - 2014

Y1 - 2014

N2 - High-performance smartphones have enabled people to accomplish diverse types of work thanks to apps which provide unprecedented portability and convenience. Unlike PCs, smartphones are constantly on and connected with the Internet via WiFi or mobile communication networks. Nonetheless, such convenience also sets up an environment favorable for attackers as well, possibly leading to the leakage of user sensitive information in real-time. In this paper, we analyzed the vulnerabilities of ContentProviders, and how it is able to leak the data of other apps. In order to show the risk of illegal leakage of personal data stored in other apps, we created a proof-of-concept malicious application by using the potential vulnerabilities which may be exploited by attackers. Then, we proposed countermeasures to address the vulnerabilities of ContentProviders.

AB - High-performance smartphones have enabled people to accomplish diverse types of work thanks to apps which provide unprecedented portability and convenience. Unlike PCs, smartphones are constantly on and connected with the Internet via WiFi or mobile communication networks. Nonetheless, such convenience also sets up an environment favorable for attackers as well, possibly leading to the leakage of user sensitive information in real-time. In this paper, we analyzed the vulnerabilities of ContentProviders, and how it is able to leak the data of other apps. In order to show the risk of illegal leakage of personal data stored in other apps, we created a proof-of-concept malicious application by using the potential vulnerabilities which may be exploited by attackers. Then, we proposed countermeasures to address the vulnerabilities of ContentProviders.

KW - Android

KW - Content Provider

KW - Data sharing

KW - Malware

KW - Security

UR - http://www.scopus.com/inward/record.url?scp=84902676777&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84902676777&partnerID=8YFLogxK

M3 - Article

VL - 17

SP - 1517

EP - 1531

JO - Information (Japan)

JF - Information (Japan)

SN - 1343-4500

IS - 4

ER -