Ghost in the Binder: Binder Transaction Redirection Attacks in Android System Services-Reference-Cited by-同舟云学术

Ghost in the Binder: Binder Transaction Redirection Attacks in Android System Services

Published:2021-11-12 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security
language:
Short-container-title:

Author:

Xiang Xiaobo¹,Zhang Ren²,Wen Hanxiang³,Gong Xiaorui⁴,Liu Baoxu⁴

Affiliation:

1. Institute of Information Engineering, Chinese Academy of Sciences; University of Chinese Academy of Sciences; Alpha Lab; and 360 Government & Enterprise Security Group, Beijing, China

2. Nervos & Shandong Institute of Blockchain, Beijing, China

3. Ant Group, Hanzhou, China

4. Institute of Information Engineering, Chinese Academy of Sciences & University of Chinese Academy of Sciences, Beijing, China

Funder

Strategic Priority Research Program of Chinese Academy of Sciences

Shandong Key Research and Development Program

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3460120.3484801

Reference45 articles.

1. Yousra Aafer Jianjun Huang Yi Sun Xiangyu Zhang Ninghui Li and Chen Tian. 2018a. AceDroid: Normalizing Diverse Android Access Control Checks for Inconsistency Detection. In NDSS. Yousra Aafer Jianjun Huang Yi Sun Xiangyu Zhang Ninghui Li and Chen Tian. 2018a. AceDroid: Normalizing Diverse Android Access Control Checks for Inconsistency Detection. In NDSS.

2. Precise Android API Protection Mapping Derivation and Reasoning

3. ViewPoints: differential string analysis for discovering client- and server-side input validation inconsistencies

4. Android Code Search. 2021 a. libbinder: Add SafeInterface. https://cs.android.com/android/_/android/platform/frameworks/native/+/d630e520de9ff4bc50723a7e8f91b6d9be27db1c. Accessed on Jan 31 2021. Android Code Search. 2021 a. libbinder: Add SafeInterface. https://cs.android.com/android/_/android/platform/frameworks/native/+/d630e520de9ff4bc50723a7e8f91b6d9be27db1c. Accessed on Jan 31 2021.

Cited by 3 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Smartphone Security and Privacy: A Survey on APTs, Sensor-Based Attacks, Side-Channel Attacks, Google Play Attacks, and Defenses;Technologies;2023-06-12

2. IAFDroid: Demystifying Collusion Attacks in Android Ecosystem via Precise Inter-App Analysis;IEEE Transactions on Information Forensics and Security;2023

3. iService: Detecting and Evaluating the Impact of Confused Deputy Problem in AppleOS;Proceedings of the 38th Annual Computer Security Applications Conference;2022-12-05