中国科学院机构知识库网格
Chinese Academy of Sciences Institutional Repositories Grid
Direct Resource Hijacking in Android

文献类型:期刊论文

作者Gu, YC ; Li, Q ; Zhang, HT ; Su, PR ; Zhang, XW ; Feng, DG
刊名IEEE INTERNET COMPUTING
出版日期2016
卷号20期号:5页码:46-56
ISSN号1089-7801
中文摘要In this article, the authors discuss a new attack called a direct resource hijacking attack (or resource hijacking attack), which directly hijacks exported components or permissions on components owned by benign applications. To tackle this vulnerability, they propose a fine-grained resource access control framework in Android and introduce a certificate-augmented resource naming mechanism. With this method, malicious apps can't hijack a victim app's permissions to steal its private data in the victim app, or hijack a victim app's components to retrieve data that's delivered to the victim app.
英文摘要In this article, the authors discuss a new attack called a direct resource hijacking attack (or resource hijacking attack), which directly hijacks exported components or permissions on components owned by benign applications. To tackle this vulnerability, they propose a fine-grained resource access control framework in Android and introduce a certificate-augmented resource naming mechanism. With this method, malicious apps can't hijack a victim app's permissions to steal its private data in the victim app, or hijack a victim app's components to retrieve data that's delivered to the victim app.
收录类别SCI
语种英语
WOS记录号WOS:000387067100007
公开日期2016-12-09
源URL[http://ir.iscas.ac.cn/handle/311060/17307]  
专题软件研究所_软件所图书馆_期刊论文
推荐引用方式
GB/T 7714
Gu, YC,Li, Q,Zhang, HT,et al. Direct Resource Hijacking in Android[J]. IEEE INTERNET COMPUTING,2016,20(5):46-56.
APA Gu, YC,Li, Q,Zhang, HT,Su, PR,Zhang, XW,&Feng, DG.(2016).Direct Resource Hijacking in Android.IEEE INTERNET COMPUTING,20(5),46-56.
MLA Gu, YC,et al."Direct Resource Hijacking in Android".IEEE INTERNET COMPUTING 20.5(2016):46-56.

入库方式: OAI收割

来源:软件研究所

浏览0
下载0
收藏0
其他版本

除非特别说明,本系统中所有内容都受版权保护,并保留所有权利。