@inproceedings{85387fedba7a434f97e72d772fee8e6c,
title = "Analyzing use of high privileges on android: An empirical case study of screenshot and screen recording applications",
abstract = "The number of Android smartphone and tablet users has experienced a rapid growth in the past few years and it raises users{\textquoteright} awareness on privacy and security issues of their mobile devices. There are lots of users rooting their Android devices for some useful functions, which are not originally provided to developers and users, such as taking screenshot and screen recording. However, after observing the danger of rooting devices, the developers begin to look for non-root alternatives to implement those functions. Android Debug Bridge (ADB) workaround is one of the best known non-root alternatives to help app gain a higher privilege on Android. It used to be considered as a secure practice until some cases of ADB privilege leakage have been found. In this paper, we propose an approach to identify the potential privilege leakage in Android apps that using ADB workaround. We apply our approach to analyze three real-world apps that are downloaded from Google Play Store. We then present a general methodology to conduct exploitation on those apps using ADB workaround. Based on our study, we suggest some mitigation techniques to help developers create their apps that not only satisfy users{\textquoteright} needs but also protect users{\textquoteright} privacy from similar attacks in future.",
keywords = "ADB workaround, Android security, Application analysis, Exploit, Privilege escalation",
author = "Meng, {Mark H.} and Guangdong Bai and Liu, {Joseph K.} and Xiapu Luo and Yu Wang",
year = "2019",
month = feb,
doi = "10.1007/978-3-030-14234-6_19",
language = "English",
isbn = "9783030142339",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
publisher = "Springer Verlag",
pages = "349--369",
editor = "Xinyi Huang and Fuchun Guo and Moti Yung",
booktitle = "Information Security and Cryptology - 14th International Conference, Inscrypt 2018, Revised Selected Papers",
address = "Germany",
note = "14th International Conference on Information Security and Cryptology, Inscrypt 2018 ; Conference date: 14-12-2018 Through 17-12-2018",
}