Abstract:Android is characterized as a complicated open source software stack created for a wide array of devices with different form of factors, whose latest release has over one hundred million lines of code. Such code is mainly developed with the Java language, which builds complicated logic and brings implicit information flows among components and the inner framework. By studying the source code of system service interfaces, we discovered an unknown type of code flaw, which is named uncaughtException flaw, caused by un-well implemented exceptions that could crash the system and be further vulnerable to system level Denial-of-Service (DoS) attacks. We found that exceptions are used to handle the errors and other exceptional events but sometimes they would kill some critical system services exceptionally. We designed and implemented ExHunter, a new tool for automatic detection of this uncaughtException flaw by dynamically reflecting service interfaces, continuously fuzzing parameters and verifying the running logs. On 11 new popular Android devices, ExHunter extracted 1045 system services, reflected 758 suspicious functions, discovered 132 uncaughtException flaws which are 0-day vulnerabilities that have never been known before and generated 275 system DoS attack exploitations. The results showed that: (1) almost every type of Android phone suffers from this flaw, (2) the flaws are different from phone by phone, and (3) all the vulnerabilities can be exploited by direct/indirect trapping. To mitigate uncaughtException flaws, we further developed ExCatcher to re-catch the exceptions. Finally, we informed four internationally renowned manufacturers and provided secure improvements in their commercial phones.

Study on Flaws Investigation and Privilege Escalation of Oracle

A Reference Model And System Architecture For Database Firewall

Detecting Privilege Escalation Attacks through Instrumenting Web Application Source Code.

OWL: Understanding and Detecting Concurrency Attacks

Oracle Distributed Database Systems and Network Security Policy Research

Threat Analysis And Security Protection For Malicious Dbms

Exploring Defense of SQL Injection Attack in Penetration Testing

Detecting Attacks That Exploit Application-Logic Errors Through Application-Level Auditing.

Hidden File Transfer Tunnel Based on Oracle Undetectable Backdoor

An Empirical Study on the Characteristics of Database Access Bugs in Java Applications

The Study of Password Security of Access 2010

Technology of detection for privilege escalation attack on Android

Study of Generating Attack Graph Based on Privilege Escalation for Computer Networks

Mitigating Access Control Vulnerabilities through Interactive Static Analysis.

Automated Enforcement of the Principle of Least Privilege over Data Source Access

Progress of Cryptographic Access Control and Encryption Security Database

Mining Privilege Escalation Paths for Network Vulnerability Analysis

An Analysis of Complexity of Insider Attacks to Databases

Exception Beyond Exception: Crashing Android System by Trapping in "Uncaughtexception"

Study on OpenSSL Heartbleed Attack Principle and Defense Method

Evocatio