• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>IEEE Conference on Communications and Network Security >Analysis of clickjacking attacks and an effective defense scheme for Android devices
【24h】

Analysis of clickjacking attacks and an effective defense scheme for Android devices

机译：针对Android设备的点击劫持攻击和有效防御方案的分析

获取原文
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Smartphones bring users lots of convenience by integrating all useful functions people may need. While users are spending more time on their phones, have they ever questioned of being spoofed by the phone they are interacting with? This paper conducts a thorough study of the mobile clickjacking attacks. We first present how the clickjacking attack works and the key points to remain undiscovered. Then, we evaluate its potential threats by exploring the feasibility of launching clickjacking attacks on various UIs, including system app windows, 3rd-party app windows, and other system UIs. Finally, we propose a system-level defense scheme against clickjacking attacks on Android platform, which requires no user or developer effort and is compatible with existing apps. The performance of the countermeasure is evaluated with extensive experiments. The results show that our scheme can effectively prevent clickjacking attacks with only a minor impact to the system.
机译：智能手机通过集成人们可能需要的所有有用功能，为用户带来了很多便利。当用户在手机上花费更多的时间时，是否有过被与之互动的电话欺骗的疑问？本文对移动点击劫持攻击进行了深入研究。我们首先介绍Clickjacking攻击的工作原理以及尚未发现的关键点。然后，我们通过探索在各种UI上发起点击劫持攻击的可行性来评估其潜在威胁，这些UI包括系统应用程序窗口，第三方应用程序窗口以及其他系统UI。最后，我们提出了一种针对Android平台上的点击劫持攻击的系统级防御方案，该方案无需用户或开发人员的努力，并且与现有应用程序兼容。该对策的性能通过广泛的实验进行了评估。结果表明，我们的方案可以有效地防止点击劫持攻击，而对系统的影响很小。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号