Abstract:ABSTRACTThe smartphone market has grown explosively in recent years, as more and more consumers are attracted to the sensor-studded multipurpose devices. Android is particularly ascendant; as an open platform, smartphone manufacturers are free to extend and modify it, allowing them to differentiate themselves from their competitors. However, vendor customizations will inherently impact overall Android security and such impact is still largely unknown. In this paper, we analyze ten representative stock Android images from five popular smartphone vendors (with two models from each vendor). Our goal is to assess the extent of security issues that may be introduced from vendor customizations and further determine how the situation is evolving over time. In particular, we take a three-stage process: First, given a smartphone's stock image, we perform provenance analysis to classify each app in the image into three categories: apps originating from the AOSP, apps customized or written by the vendor, and third-party apps that are simply bundled into the stock image. Such provenance analysis allows for proper attribution of detected security issues in the examined Android images. Second, we analyze permission usages of pre-loaded apps to identify overprivileged ones that unnecessarily request more Android permissions than they actually use. Finally, in vulnerability analysis, we detect buggy pre-loaded apps that can be exploited to mount permission re-delegation attacks or leak private information. Our evaluation results are worrisome: vendor customizations are significant on stock Android devices and on the whole responsible for the bulk of the security problems we detected in each device. Specifically, our results show that on average 85.78% of all pre-loaded apps in examined stock images are overprivileged with a majority of them directly from vendor customizations. In addition, 64.71% to 85.00% of vulnerabilities we detected in examined images from every vendor (except for Sony) arose from vendor customizations. In general, this pattern held over time -- newer smartphones, we found, are not necessarily more secure than older ones.

Oh-Pwn-Vpn! Security Analysis Of Openvpn-Based Android Apps

Detecting Passive Content Leaks and Pollution in Android Applications.

An Empirical Study of Insecure Communication in Android Apps

Vulnerability Assessment of OAuth Implementations in Android Applications

SIMulation: Demystifying (insecure) Cellular Network Based One-Tap Authentication Services

Analysis and design of VPN based on wireless Android intelligent home center

Security Analysis of Mobile Device-to-Device Network Applications

Appcracker: Widespread vulnerabilities in user and session authentication in mobile apps

Open Sesame! Web Authentication Cracking Via Mobile App Analysis.

Certified Copy? Understanding Security Risks of Wi-Fi Hotspot Based Android Data Clone Services

Security Apps under the Looking Glass: An Empirical Analysis of Android Security Apps

From guidelines to practice: assessing Android app developer compliance with google's security recommendations

Ios, Your OS, Everybody's OS: Vetting and Analyzing Network Services of Ios Applications.

When program analysis meets mobile security: an industrial study of misusing Android internet sockets

Very Pwnable Network: Cisco AnyConnect Security Analysis

OpenVPN is Open to VPN Fingerprinting

Analyzing security issues of android mobile health and medical applications

The impact of vendor customizations on android security.

Security Analysis of Top-Ranked mHealth Fitness Apps: An Empirical Study

Client-side Vulnerabilities in Commercial VPNs

An Empirical Study of SMS One-Time Password Authentication in Android Apps