In pursuit of a secure UI: The cycle of breaking and fixing Android’s UI

Bove D, Kalysch A (2019)

Publication Language: English

Publication Type: Journal article

Publication year: 2019

Journal

it - Information Technology Gesellschaft für Informatik

Book Volume: Methods and Applications of Informatics and Information Technology

DOI: 10.1515/itit-2018-0023

Abstract

Hijacking user clicks and touch gestures has become a common attack vector and offers a stealthy approach at escalating the privileges of a process without raising red flags among users or AV software. Exploits falling into this category are categorized as clickjacking attacks and have gained increased popularity on mobile devices, Android being the recent victim of a series of UI vulnerabilities.

Focusing on the Android OS this paper highlights previous and current UI-based attack vectors and finishes with an overview of security mechanisms, covering both system-wide as well as app-level protection measures.

Authors with CRIS profile

Davide Bove Lehrstuhl für Informatik 1 (IT-Sicherheitsinfrastrukturen) Anatoli Kalysch Lehrstuhl für Informatik 1 (IT-Sicherheitsinfrastrukturen)

How to cite

APA:

Bove, D., & Kalysch, A. (2019). In pursuit of a secure UI: The cycle of breaking and fixing Android’s UI. it - Information Technology, Methods and Applications of Informatics and Information Technology. https://dx.doi.org/10.1515/itit-2018-0023

MLA:

Bove, Davide, and Anatoli Kalysch. "In pursuit of a secure UI: The cycle of breaking and fixing Android’s UI." it - Information Technology Methods and Applications of Informatics and Information Technology (2019).

BibTeX: Download