All your droid are belong to us: A survey of current android attacks

5th USENIX Workshop on Offensive Technologies, WOOT 2011

Volumn , Issue , 2011, Pages

  Vidas, Timothy ^a   Votipka, Daniel ^a   Christin, Nicolas ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ANDROID (OPERATING SYSTEM); MIDDLEWARE; PERSONAL COMPUTERS;

ANDROID MARKETS; ANDROID SECURITIES; APPLICATION PERMISSIONS; COMPUTATIONAL POWER; DATA CONNECTIVITY; SECURITY ATTACKS; SECURITY FEATURES;

MOBILE SECURITY;

EID: 85084161115     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (45)

1. Android debug bridge. http://developer.android.com/guide/developing/tools/ adb.html.
2. Android developers. http://developer.android.com/.
3. Android developers sdk. http://developer.android.com/sdk/android-1.1.html.
4. Android market statistics. http://www.androlib.com/appstats.aspx.
5. Applications using webkit - webkit. http://trac.webkit.org/wiki/Applications\ %20using\%20WebKit.
6. Easy root. http://www.unstableapps.com/buyme.html.
7. Factsheet: The U.S. media universe | nielsen wire. http://blog.nielsen.com/nielsenwire/online_mobile/factsheet-the-u-smedia-universe/.
8. Lookout mobile security - android market. https://market.android.com/details?id=com.lookout.
9. Open handset alliance. http://www.openhandsetalliance.com/.
10. Permission list is incorrect for apks built with android 1.6 sdk. https://code.google.com/p/android/issues/detail?id=4101.
11. Root tools. https://market.android.com/details?id=com.jrummy.roottools.
12. Trojanized apps root android devices. http://blog.trendmicro.com/trojanizedapps-root-android-devices/.
13. Unix system family tree: Research and bsd. http://www.freebsd.org/cgi/cvsweb.cgi/~checkout~/src/share/misc/bsdfamily-tree?rev=HEAD.
14. What is android. http://developer.android.com/guide/basics/what-is-android.html.
15. Zeus targets mobile users. http://blog.trendmicro.com/zeus-targets-mobileusers/.
16. Just because it’s signed doesn’t mean it isn’t spying on you. http://www.f-secure.com/weblog/archives/00001190.html, May 2007.
17. Worm:symbos/yxe. http://www.f-secure.com/v-descs/worm_symbos_yxe.shtml, May 2007.
18. Android most popular operating system in U.S. among recent smartphone buyers | nielsen wire. http://blog.nielsen.com/nielsenwire/online\_mobile/androidmost-popular-operating-system-in-us-among-recent-smartphone-buyers/, Oct. 2010.
19. Rooting the droid without rsdlite. http://androidforums.com/droid-all-things-root/171056-rooting-droid-withoutrsd-lite-up-including-frg83d.html, Dec. 2010.
20. Canvas: Owning android. http://partners.immunityinc.com/movies/Lightning\ _Demo\_Android.zip, Jan. 2011.
21. D. Barrera, H. Kayacik, P. van Oorschot, and A. Somayaji. A methodology for empirical analysis of permission-based security models and its application to android. In Proceedings of the 17th ACM conference on Computer and communications security, pages 73–84. ACM, 2010.
22. D. Brumley, P. Poosankam, D. Song, and J. Zheng. Automatic patch-based exploit generation is possible: Techniques and implications. In IEEE Symp. S.& P. 2008, pages 143–157, May 2008.
23. J. V. Camp. Only 36.2 percent of android devices run froyo. http://www.digitaltrends.com/mobile/only-36-2-percent-of-androiddevices-run-froyo/, Nov. 2010.
24. T. Cannon. Android lock screen bypass. http://thomascannon.net/blog/2011/02/android-lock-screen-bypass. [25] C. Davies. Sprint htc hero android 2.1 update released. http://www.slashgear.com/ sprint-htc-hero-android-2-1-updatereleased-1986138/, May 2010.
25. W. Enck, P. Gilbert, B. Chun, L. Cox, J. Jung, P. McDaniel, and A. Sheth. TaintDroid: an information-flow tracking system for realtime privacy monitoring on smartphones. In Proceedings of OSDI, 2010.
26. W. Enck, M. Ongtang, and P. Mcdaniel. On lightweight mobile phone application certification. In ACM Conference on Computer and Communications Security, pages 235–245. ACM, 2009.
27. D. Geer, R. Bace, P. Gutmann, P. Metzger, C. Pfleeger, J. Quarterman, and B. Schneier. Cyberinsecurity: The cost of monopoly. Computer and Communications Industry Association, 2003.
28. E. Hardy. Andoird OS 2.1 upgrade for T-Mobile myTouch 3G, Motorola Cliq, Cliq XT coming in August. http://www.brighthand.com/ default.asp?newsID=16767, July 2010.
29. J. Herrman. Android 2.1 update finally live for Motorola Droid. http://gizmodo.com/\#!5505520/android-21-update-finally-live-for-motorola-droid, Mar. 2010.
30. K. J. Higgins. Researcher to release smartphone botnet proof-of-concept code. http://mobile.darkreading.com/9287/show/54cc009853e3f863244c0b267a73ae86, Jan. 2011.
31. K. Mahaffey. http://blog.mylookout.com/2011/03/security-alert-malware-found-in-official-android-market-droiddream/, Mar. 2011.
32. L. Menchaca. AT&T sim-locked units and the Froyo update - direct2dell. http://en.community.dell.com/dell-blogs/ Direct2Dell/b/direct2dell/archive/ 2010/12/09/at-amp-t-sim-locked-units-and-the-froyo-update.aspx, Dec. 2010.
33. J. Oberheide. Remote kill and install on google android. http://jon.oberheide.org/blog/2010/06/25/remote-kill-and-installon-google-android/.
34. B. Prince. Google android trojan, fbi raid linked to operation payback lead security news. http://www.eweek.com/c/a/Security/GoogleAndroid-Trojan-FBI-Raid-Linked-to-Operation-Payback-Lead-News-406931/, Jan. 2011.
35. J. Raphael. Android 2.2 upgrade list: Is your phone getting Froyo? - Computerworld Blogs. http://blogs.computerworld.com/16310/android\_22\_upgrade\_list, June 2010.
36. A. Shabtai, Y. Fledel, and Y. Elovici. Securing Android-powered mobile devices using SELinux. Security & Privacy, IEEE, 8(3):36–44, 2010.
37. A. Shabtai, Y. Fledel, U. Kanonov, Y. Elovici, S. Dolev, and C. Glezer. Google android: A comprehensive security assessment. Security Privacy, IEEE, 8(2):35 –44, march-april 2010.
38. T. Vennon. Android malware. A study of known and potential malware threats. Technical report, Technical Report White paper, SMobile Global Threat Center, Feb. 2010.
39. T. Vidas, N. Christin, and L. Cranor. Curbing android permission creep. W2SP 2011, May 2011.
40. T. Vidas, C. Zhang, and N. Christin. Towards a general collection methodology for android devices. DFRWS 2011, Aug. 2011.
41. A. Waqas. Root any android device and samsung captivate with super one-click app. http://www.addictivetips.com/mobile/ root-any-android-device-and-samsung-captivate-with-super-one-click-app/, Oct. 2010.
42. T. Wimberly. Sprint releases android 2.1 for samsung moment. http://androidandme.com/2010/05/news/sprint-releases-android-2-1-for-samsung-moment/, May 2010.
43. T. Wimberly. Top 10 android phones, best selling get software updates first. http://androidandme.com/2010/11/news/top-10-android-phones-best-selling-get-software-updates-first/, Nov. 2010.
44. J. Wise. Unrevoked3 recovery reflash tool. http://unrevoked.com/rootwiki/doku.php/public/unrevoked3, Jan. 2011.
45. B. Woods. Researchers expose android webkit browser exploit. http://www.zdnet.co.uk/news/security-threats/2010/11/08/ researchers-expose-android-webkit-browser-exploit-40090787/, Nov. 2010.