Privilege Escalation Attacks on Android

By Lucas Davi, Alexandra Dmitrienko, Ahmad-Reza Sadeghi, Marcel Winandy. Information Security Conference, 2010

508 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Information Systems, Signal Processing

View Paper: https://www.semanticscholar.org/paper/00822050c3abad3e79924dc07f24ee0182f67869

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Information Systems

In Signal Processing

Citations in the corpus

XManDroid: A New Android Evolution to Mitigate Privilege Escalation Attacks (2011, methodology): “In this paper we address the problem of application-level privilege escalation attacks on Android as shown recently by several severe attacks [13, 8, 26, 37].”
Why eve and mallory love android: an analysis of android SSL (in)security (2012, background): “Consequently, several efforts have been made to investigate privilege problems in Android apps [17, 9, 4, 3, 18].”
QUIRE: Lightweight Provenance for Smart Phone Operating Systems (2011, background): “, a confused deputy attack [18], intent stealing/spoofing [9], or other privilege escalation attacks [11]).”
Cybersecurity data science: an overview from machine learning perspective (2020, background): “Beside these attacks mentioned above, privilege escalation [29], password attack [30], insider threat [31], man-in-the-middle [32], advanced persistent threat [33], SQL injection attack [34], cryptojacking attack [35], web application attack [30] etc.”
Systematic Detection of Capability Leaks in Stock Android Smartphones (2012, background): “Other researchers also warn of similar attacks in Android [10, 12, 29].”
Effective inter-component communication mapping in Android with Epicc: an essential step towards holistic security analysis (2013, methodology): “For example, our analysis can also be used to perform information flow analysis between application components and to identify new types of attacks, such as application collusion [5, 8], where two applications work together to compromise the privacy of the user.”
CHEX: statically vetting Android apps for component hijacking vulnerabilities (2012, background): “As demonstrated by [11, 20, 21, 27], an unprivileged malicious app can access permission-protected resources through privileged agents (or app components) that do not properly enforce permission checks.”
Towards Taming Privilege-Escalation Attacks on Android (2012, methodology): “Android's security framework (enforcing sandboxing and permission checks) is not sufficient for transitive policy enforcement allowing privilege escalation attacks as shown by the recent attacks [16] [12] [20] [35].”
AI-Driven Cybersecurity: An Overview, Security Intelligence Modeling and Research Directions (2021, background): “Others Privilege escalation [40], password attack [41], advanced persistent threat [42], cryptojacking attack [43], web application attack [41], and so on”
Cyber-physical systems security: Limitations, issues and future trends (2020, unknown): “• Password Cracking: aim to target the authenticity of CPS users[167], [168] (mainly engineers and managers) by trying to crack their passwords using brute-force [169], dictionary [170] (mitigated by using key exchange [171]), rainbow table [172], birthday (mitigated by hashing) [173] or…”
Permission Re-Delegation: Attacks and Defenses (2011, background): “Davi et al. discuss permission re-delegation attacks on Android [8].”
A visual analytics approach to understanding cycling behaviour (2012, unknown): “…timescale proposed by Nicholls and Ranger [2] can be used as a convenient non-dimensionalisation parameter for understanding the temporal development of the process: It is generally considered [1] that when the Oh number is less than 0.1 the droplet breakup is mostly influenced by the We number.”