Security Weaknesses of the Android Advertising Ecosystem

ISBN-13: 9783659853111 / Angielski / Miękka / 2016 / 100 str.

Jeremy Tate

Opis

Mobile device security is becoming increasingly important as the number of devices that are used continues to grow and has surpassed one billion active devices globally. In this book, we will investigate the security of Android ad supported apps, security vulnerabilities that have been identified in the way those ads are delivered to the device and improvements that can be made to protect the privacy of the end user. To better understand the threats to mobile devices, a threat analysis will be conducted, investigating the different attack vectors that devices are susceptible to. The specific attacks that are detailed in this work are addJavascriptInterface attacks against a WebView used to display an ad and information leakage from the ad URL request. These attack vectors are discussed in detail with applicability and feasibility studies conducted. The results of these attacks will be analyzed with a discussion of the methodology used to obtain them. Mitigation techniques will also be discussed to protect end users from such attacks.

O autorze

Mr. Tate is a senior engineer working in the consulting industry with clients in the Federal government and civil sectors. He received his B.S. in Computer Engineering from the University of Nebraska-Lincoln, and his M.S. in Computer Engineering from Virginia Polytechnic Institute and State University (Virginia Tech).