返回
Mobile cloud security: An adversary model for lightweight browser security
DOI:10.1016/j.csi.2016.09.002.png)
摘要
En 中文
Lightweight browsers on mobile devices are increasingly been used to access cloud services and upload / view data stored on the cloud, due to their faster resource loading capabilities. These browsers use client side efficiency measures such as larger cache storage and fewer plugins. However, the impact on data security of such measures is an understudied area. In this paper, we propose an adversary model to examine the security of lightweight browsers. Using the adversary model, we reveal previously unpublished vulnerabilities in four popular light browsers, namely: UC Browser, Dolphin, CM Browser, and Samsung Stock Browser, which allows an attacker to obtain unauthorized access to the user's private data. The latter include browser history, email content, and bank account details. For example, we also demonstrate that it is possible to replace the images of the cache in one of the browsers, which can be used to facilitate phishing and other fraudulent activities. By identifying the design flaw in these browsers (i.e. improper file storage), we hope that future browser designers can avoid similar errors. (C) 2016 Elsevier B.V. All rights reserved.
Keyword:
Mobile cloud security
Lightweight browser security
UC Browser
Dolphin
CM Browser
Samsung Stock Browser
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
C
IF:
3.1
论文数:
2.3K
被引数:
2.0K
机构
引用论文
Full Valence Band Photoemission from Liquid Water Using EUV Synchrotron Radiation使用EUV同步加速器辐射从液态水中全价带光发射
Living at the extreme: extremophiles and the limits of life in a planetary context.在极端环境中生存:极端微生物及在行星背景下的生命极限。
Man-in-the-browser-cache: Persisting HTTPS attacks via browser cache poisoning
COMPUTERS & SECURITY
IF5.4

