Analyzing inter-application communication in Android

By Erika Chin, Adrienne Porter Felt, Kate Greenwood, David A. Wagner. ACM SIGMOBILE International Conference on Mobile Systems, Applications, and Services, 2011

936 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Information Systems, Signal Processing

View Paper: https://www.semanticscholar.org/paper/5f53df80f391f6555510ac3faf49d92cd5fddebb

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Information Systems

In Signal Processing

Citations in the corpus

PScout: analyzing the Android permission specification (2012, background): “ComDroid [10] analyze inter-application message and identify application communication vulnerabilities.”
Effective inter-component communication mapping in Android with Epicc: an essential step towards holistic security analysis (2013, methodology): “In this section, we perform a study of ICC vulnerabilities in our samples using Epicc and compare our results with ComDroid [6].”
Permission Re-Delegation: Attacks and Defenses (2011, background): “The Android communication system makes it easy for applications to accidentally expose internal functionality [6].”
Protecting Visual Information in Augmented Reality from Malicious Application Developers (2019, neutral): “ComDroid analyzes intent statically [6].”
RiskRanker: scalable and accurate zero-day android malware detection (2012, neutral): “ComDroid [34] and Woodpecker [44] both employ static analysis techniques to detect such attacks in third-party and firmware apps, respectively.”
Towards Taming Privilege-Escalation Attacks on Android (2012, background): “ble application interfaces [10, 15] or analyze if applications follow the least-privilege principle [19].”
Amandroid: A Precise and General Inter-component Data Flow Analysis Framework for Security Vetting of Android Apps (2014, background): “There has been a long line of works on applying static analysis for Android security problems [6, 8, 11, 14, 17, 20, 23, 25].”
XManDroid: A New Android Evolution to Mitigate Privilege Escalation Attacks (2011, background): “ComDroid [6] is a recent static analysis tool that detects application communication vulnerabilities.”
CHEX: statically vetting Android apps for component hijacking vulnerabilities (2012, background): “Component hijacking vulnerabilities include, but are not limited to, several previously reported vulnerabilities, such as permission redelegation and leakage [20, 21], intent spoofing [10], and private data leakage (e.”
Security Analysis of Emerging Smart Home Applications (2016, background): “However, bugs in Intent usage can lead to circumventing access control checks as well as to permitting spoofing [11].”
Evaluating Analysis Tools for Android Apps: Status Quo and Robustness Against Obfuscation (2016, background): “Epicc [14], ComDroid [5] and Flow-Droid [9] were unable to properly analyze data being passed around after obfuscation.”
Android permissions demystified (2011, methodology): “We use ComDroid [8] to detect the sending and receiving of Intents that require permissions.”
You Get Where You're Looking for: The Impact of Information Sources on Code Security (2016, background): “Chin et al. characterized errors in inter-application communications ( intents ) that can lead to interception of private data, service hijacking, and control-ﬂow attacks [9].”
Advanced social engineering attacks (2015, methodology): “This research was funded by the Austrian Science Fund (FWF): P 26289-N23 and COMET K1, FFG - Austrian Research Promotion Agency.”
Modeling Users' Mobile App Privacy Preferences: Restoring Usability in a Sea of Permission Settings (2014, background): “A great deal of past work analyzing smartphone apps has focused on developing useful techniques and tools to detect and manage leakage of sensitive personal information [8-10, 14-26] or studying how users react to these usages [6, 13, 27, 28].”
Expectation and purpose: understanding users' mental models of mobile app privacy through crowdsourcing (2012, background): “Previous research has discussed several problems with the existing Android permission screens [18, 26], including: • The wording of the permission list contains too much technical jargon for lay users.”
Android Security: A Survey of Issues, Malware Penetration, and Defenses (2015, background): “This section discusses the strengths and drawbacks of well known analysis techniques, tools and summarize as per the functionality discussed in Table I. Comparison of the popular, web based analysis sandbox is illustrated in Table II.”