NDLI: UiRef: analysis of sensitive user inputs in Android applications

Please wait, while we are loading the content...

User authentication and identification from user interface interactions on touch-enabled devices

Quantifying the reflective DDoS attack capability of household IoT devices

SeED: secure non-interactive attestation for embedded devices

Massive reactive smartphone-based jamming using arbitrary waveforms and adaptive power control

Advancing attacker models of satellite-based localization systems: the case of multi-device attackers

Geosocial query with user-controlled privacy

Trashing IMSI catchers in mobile networks

There are many apps for that: quantifying the availability of privacy-preserving apps

Reliability model for multimedia cloud networks: poster

Using hover to compromise the confidentiality of user input on Android

Power-positive networking using wireless charging: protecting energy against battery exhaustion attacks

SCAPI: a scalable attestation protocol to detect software and physical attacks

HanGuard: SDN-driven protection of smart home WiFi devices from malicious mobile apps

PHY-layer security is no alternative to cryptography

Coresident evil: noisy vibrational pairing in the face of co-located acoustic eavesdropping

ESIoT: enabling secure management of the internet of things

Resilient privacy protection for location-based services through decentralization

Secure infotainment infrastructure of connected car: poster

UiRef: analysis of sensitive user inputs in Android applications

Physical-layer fingerprinting of LoRa devices using supervised and zero-shot learning

Anonymous attestations made practical

Unity is strength!: combining attestation and measurements inspection to handle malicious data injections in WSNs

An autonomic and permissionless Android covert channel

Insecure to the touch: attacking ZigBee 3.0 via touchlink commissioning

Challenges to PHY anonymity for wi-fi

CrowdZen privacy: poster

Towards continuous and passive authentication across mobile devices: an empirical study

HYDRA: hybrid design for remote attestation (using a formally verified microkernel)

Binary hash tree based certificate access management for connected vehicles

YELP: masking sound-based opportunistic attacks in zero-effort deauthentication

Breaking and fixing the HB+DB protocol

Scalable privacy: poster

Bloom filter based certificate validation for VANET: poster

TTPP method for validation of k-anonymity on wi-fi association log data: poster

Highly-accurate rogue access point detection using intentional channel interference: poster

Two-level network monitoring and management in WLAN using software-defined networking: poster

Toward secure and efficient attestation for highly dynamic swarms: poster

A roaming-based denial of service attack on LTE networks: poster

Demonstrating reactive smartphone-based jamming: demo

Railway bridge health monitoring system using smart wireless sensor network: demo

UiRef: analysis of sensitive user inputs in Android applications

Content Provider	ACM Digital Library
Author	Andow, Benjamin Enck, William Singh, Kapil Xie, Tao Acharya, Akhil Li, Dengfeng
Abstract	Mobile applications frequently request sensitive data. While prior work has focused on analyzing sensitive-data uses originating from well-defined API calls in the system, the security and privacy implications of inputs requested via application user interfaces have been widely unexplored. In this paper, our goal is to understand the broad implications of such requests in terms of the type of sensitive data being requested by applications. To this end, we propose UiRef (User Input REsolution Framework), an automated approach for resolving the semantics of user inputs requested by mobile applications. UiRef's design includes a number of novel techniques for extracting and resolving user interface labels and addressing ambiguity in semantics, resulting in significant improvements over prior work. We apply UiRef to 50,162 Android applications from Google Play and use outlier analysis to triage applications with questionable input requests. We identify concerning developer practices, including insecure exposure of account passwords and non-consensual input disclosures to third parties. These findings demonstrate the importance of user-input semantics when protecting end users.
Starting Page	23
Ending Page	34
Page Count	12
File Format	PDF
ISBN	9781450350846
DOI	10.1145/3098243.3098247
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2017-07-18
Publisher Place	New York
Access Restriction	Subscribed
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in